Subtlewebinc

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Subtlewebinc records in CISA KEV

No Subtlewebinc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Formcraft3 1 record MEDIUM

Records

1 record

TI-2022-00508 CVE-2022-0591 · GHSA-x9wp-hprc-2gvq

Formcraft3 < 3.8.28 - Unauthenticated SSRF

MEDIUM 58

The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.20249 Published 2022-03-21 Fixed in 3.8.28 CWE-918

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0