CVE-2017-13137: Formcrafts Formcraft

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.

Affected products

• Formcrafts Formcraft: version 1.0.5 only

Published 2017-08-23. Last modified 2026-06-17.