title: Formcraft3 < 3.8.28 - Unauthenticated SSRF
description: The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
product: FormCraft
vendor: Unknown
versions:
lessThan: 3.8.28, status: affected, version: 3.8.28, versionType: custom
}