What’s Vulnerable › Products

nCrafts FormCraft vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your nCrafts FormCraft version is affected

Latest nCrafts FormCraft vulnerabilities

• CVE-2026-7232 — FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters (CVSS 7.2)
• CVE-2025-0817 — FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload (CVSS 6.1)
• CVE-2024-13783 — FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php (CVSS 4.3)
• CVE-2023-47823 — WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-43157 — WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2023-2592 — FormCraft Premium < 3.9.7 - Admin+ SQLi (CVSS 7.2)
• CVE-2023-22717 — WordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2022-1647 — FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting (CVSS 4.8)
• CVE-2017-18600 — (CVSS 5.4)
• CVE-2019-15114 — (CVSS 8.8)
• CVE-2019-5920 — (CVSS 8.8)
• CVE-2013-7187 — (CVSS 7.5)