WordPress Plugin Vulnerabilities

FormCraft <= 2.0.5 - Arbitrary File Deletion

Description

Successfully tested with v2.0.2

Affects Plugins

Plugin icon
formcraft
No known fix

References

URL
https://en.0day.today/exploits/22648

Miscellaneous

Submitter
erwanlr
Verified
Yes
WPVDB ID
eb40844c-f8d7-46ac-8291-fc29e971ac37

Timeline

Publicly Published
2014-09-17 (about 9 years ago)
Added
2014-09-17 (about 9 years ago)
Last Updated
2020-10-25 (about 3 years ago)

Other

Published
Title
Published
2020-02-05
Title
Events Manager < 5.9.7.2 - CSV Injection
Published
2023-05-30
Title
Blog-in-Blog <= 1.1.1 - Editor+ Stored Cross-Site Scripting via Shortcode
Published
2014-08-01
Title
NextGEN Gallery 2.0.0 - Directory Traversal
Published
2017-03-01
Title
VaultPress <= 1.8.6 - Backend Server SSL Verification Disabled
Published
2014-08-01
Title
mb.YTPlayer for background videos 1.7.2 - TinyMCE Popup Unspecified Issue