CyberSec.Space Logo
CVEブラウザに戻る

CVE-2013-7187

HIGH
7.5
CVSS Severity Score
EPSS Score0.1940%
EPSS Percentile39.52th
Published2013年12月20日
Last Modified2026年4月29日

Vulnerability Description

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦
Ncrafts

Formcraft

<= 1.3.7
📦
Ncrafts

Formcraft

= 1.1
📦
Ncrafts

Formcraft

= 1.2
📦
Ncrafts

Formcraft

= 1.2.1
📦
Ncrafts

Formcraft

= 1.3
📦
Ncrafts

Formcraft

= 1.3.1
📦
Ncrafts

Formcraft

= 1.3.2
📦
Ncrafts

Formcraft

= 1.3.3
📦
Ncrafts

Formcraft

= 1.3.4
📦
Ncrafts

Formcraft

= 1.3.5
📦
Ncrafts

Formcraft

= 1.3.6

References & Advisories

関連する脆弱性情報