FormCraft

Products

ProductCVEsExploitedLatest
FormCraft3–Jul 23, 2026

Exploited and recent CVEs

  • CVE-2026-7232 High 7.2 FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters 0.3%
  • CVE-2024-13783 Medium 4.3 FormCraft <= 3.9.11 - Missing Authorization to Plugin Data Export in formcraft-main.php 0.4%
  • CVE-2025-0817 High 7.2 FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.4%