Vulnerabilities (CVE)

Filtered by vendor Ncrafts Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15114 1 Ncrafts 1 Formcraft 2019-08-21 6.8 MEDIUM 8.8 HIGH
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.
CVE-2019-5920 1 Ncrafts 1 Formcraft 2019-03-14 6.8 MEDIUM 8.8 HIGH
Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.