plugin
8 known security issues reported for the Formcraft WordPress plugin. Most recent disclosed Jul 27, 2026.
Running Formcraft on your site? Check whether your installed version is affected.
Scan your site freeThe FormCraft plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.9.15. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal...
[en] The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
This plugin is prone to an arbitrary file deletion vulnerability. Update the plugin.
The formcraft plugin for WordPress is vulnerable to Arbitrary File Deletion via the 'function.php' file. This makes it possible for unauthenticated attackers to delete files within the scope of the vulnerable service.
The formcraft plugin for WordPress is vulnerable to Arbitrary File Deletion via the 'function.php' file. This makes it possible for unauthenticated attackers to delete files within the scope of the vulnerable service.
[en] SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Successfully tested with v2.0.2
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free