İçeriğe atla
Noroxi

nCrafts kayıtları

ncrafts üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%10
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10 kayıt
  • CVE-2019-5920
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of admin

    YüksekCVSS 8,8İstismar yokEPSS %0

    ncrafts · formcraft12 Mar 2019

  • CVE-2019-15114
    35İzleyin

    The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %0

    ncrafts · formcraft16 Ağu 2019

  • CVE-2013-7187
    31İzleyin

    SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    ncrafts · formcraft20 Ara 2013

  • CVE-2023-2592
    28İzleyin

    FormCraft Premium < 3.9.7 - Admin+ SQLi

    YüksekCVSS 7,2İstismar yokEPSS %0

    ncrafts · formcraft27 Haz 2023

  • CVE-2025-0817
    24İzleyin

    FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

    OrtaCVSS 6,1İstismar yokEPSS %0

    ncrafts · formcraft18 Şub 2025

  • CVE-2017-18600
    21İzleyin

    The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.

    OrtaCVSS 5,4İstismar yokEPSS %0

    ncrafts · formcraft10 Eyl 2019

  • CVE-2023-47823
    21İzleyin

    WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    ncrafts · formcraft9 Ara 2024

  • CVE-2023-22717
    21İzleyin

    WordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    ncrafts · formcraft15 May 2023

  • CVE-2022-1647
    19İzleyin

    FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    ncrafts · formcraft8 Haz 2022

  • CVE-2024-13783
    17İzleyin

    FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php

    OrtaCVSS 4,3İstismar yokEPSS %0

    ncrafts · formcraft18 Şub 2025