FormCraft

FormCraft has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high.

The most common weakness is Path Traversal, behind 1 of the records (33%). Other recurring categories include Server-Side Request Forgery (SSRF), SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2014.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

8.7/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all FormCraft vulnerabilities before they are exploited.

Most severe open issueCVSS 9.1

Formcraft (Unknown Versions) - Arbitrary File Deletion

Read the full analysis

Vulnerability Records

3 records


2026-07-27 00:00	FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery FormCraft <= 3.9.15	`CVE-2026-65442`	7.2 High	luc	Yes
2014-09-17 00:00	Formcraft (Unknown Versions) - Arbitrary File Deletion FormCraft <= 2.0.5	`N/A`	9.1 Critical	NULL_Pointer	No
2013-12-08 00:00	FormCraft <= 1.3.7 - SQL Injection FormCraft <= 1.3.7	`CVE-2013-7187`	9.8 Critical	Ashiyane Digital Security Team	Yes

Showing 1–3 of 3 reports