High 7.2
2025-02-18< 3.9.12
FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Minimum safe version
3.9.12
Update to 3.9.12 or later to address 5 fixable vulnerabilities
FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2024-13783
WordPress FormCraft 3 premium plugin <=3.2.31 - Authenticated Stored Cross-site scripting (XSS) vulnerability
CVE-2022-0591
CVE-2017-18600