CVE-2013-7187

NONE EPSS 90.8%

Published Dec 20, 201312y ago · Modified Jun 17, 20262w ago

Published Dec 20, 2013 12y ago

Last Modified Jun 17, 2026 2w ago

Description

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Threat Intelligence

EPSS Exploit Probability

90.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 11

Vendor	Product	Version	Range
ncrafts	formcraft	*	≤1.3.7
ncrafts	formcraft	1.1	any
ncrafts	formcraft	1.2	any
ncrafts	formcraft	1.2.1	any
ncrafts	formcraft	1.3	any
ncrafts	formcraft	1.3.1	any
ncrafts	formcraft	1.3.2	any
ncrafts	formcraft	1.3.3	any
ncrafts	formcraft	1.3.4	any
ncrafts	formcraft	1.3.5	any
ncrafts	formcraft	1.3.6	any

References 5

packetstormsecurity.com http://packetstormsecurity.com/files/124343/wpformcraft-sql.txt

Exploit
secunia.com http://secunia.com/advisories/56044

Vendor Advisory
exploit-db.com http://www.exploit-db.com/exploits/30002

Exploit
securityfocus.com http://www.securityfocus.com/bid/64183

Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/89581

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.