Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-65442

WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Subtlewebinc Wordpress
Products
Formcraft3 Wordpress
CVE-2022-0591

Formcraft3 < 3.8.28 - Unauthenticated SSRF

The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users

CVSS 3.1 · 9.1 Critical EPSS 20.2% KEV · Not listed
Vendors
Subtlewebinc
Products
Formcraft3