Critical severity9.1NVD Advisory· Published Mar 21, 2022· Updated Jun 17, 2026
CVE-2022-0591
CVE-2022-0591
Description
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/b5303e63-d640-4178-9237-d0f524b13d47nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.