Filtered by vendor Subtlewebinc Subscriptions
Filtered by product Formcraft3 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-0591 1 Subtlewebinc 1 Formcraft3 2024-11-21 9.1 Critical
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users