WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
formbuilder
Published
2017-01-28
Title
FormBuilder <= 1.0.7 - Multiple Authenticated SQL Injection
Slug
formbuilder
Published
2012-05-28
Title
Formbuilder < 0.91 - XSS
Slug
formbuilder
Published
2022-03-08
Title
FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
Slug
formcraft
Published
2013-12-08
Title
FormCraft - form.php id Parameter SQL Injection
Slug
formcraft
Published
2014-09-17
Title
FormCraft <= 2.0.5 - Arbitrary File Deletion
Slug
formcraft
Published
2026-07-27
Title
FormCraft < 3.9.16 - Unauthenticated Server-Side Request Forgery
Slug
formcraft-form-builder
Published
2019-02-26
Title
FormCraft <= 1.2.1 - Cross-Site Request Forgery (CSRF)
Slug
formcraft-form-builder
Published
2022-05-16
Title
FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting
Slug
formcraft-form-builder
Published
2023-04-19
Title
FormCraft < 1.2.10 - Contributor+ Stored XSS
Slug
formcraft-form-builder
Published
2023-06-05
Title
FormCraft Premium < 3.9.7 - Admin+ SQLi
Slug
formcraft-form-builder
Published
2023-08-02
Title
FormCraft < 1.2.7 - Admin+ Stored XSS
Slug
formcraft-form-builder
Published
2023-11-16
Title
FormCraft < 1.2.8 - Missing Authorization via formcraft_nag_update
Slug
formcraft-form-builder
Published
2024-08-07
Title
FormCraft < 1.2.11 - Missing Authorization
Slug
formcraft3
Published
2017-07-26
Title
FormCraft - Premium WordPress Form Builder < 3.4 - Authenticated Stored XSS
Slug
formcraft3
Published
2022-02-28
Title
Formcraft3 < 3.8.28 - Unauthenticated SSRF
Slug
formcraft3
Published
2025-02-17
Title
FormCraft - Premium WordPress Form Builder < 3.9.12 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
formcraft3
Published
2025-02-17
Title
FormCraft < 3.9.12 - Missing Authorization to Plugin Data Export in formcraft-main.php
Slug
formcraft3
Published
2026-07-22
Title
FormCraft < 3.9.15 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters
Slug
formello
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-02-20
Title
FormFacade < 1.2.2 - Contributor+ Stored XSS
Slug
formfacade
Published
2024-08-16
Title
FormFacade < 1.3.3 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-10-25
Title
FormFacade < 1.3.7 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-12-11
Title
FormFacade < 1.3.7 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2025-12-31
Title
FormFacade <= 1.4.1 - Cross-Site Request Forgery
Slug
formflow-for-gohighlevel
Published
2026-10-16
Title
FormFlow for GoHighLevel < 1.0.1 - Unauthenticated Sensitive Data Disclosure via Log File