CVE-2019-15780 - The formidable plugin before 4.02.01 for WordPress has unsafe deserialization

CRITICAL

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization

Published Aug 29, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 2.39%

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6704		Advisory
https://pentest.co.uk/labs/advisory/cve-2019-15780/		x_refsource_MISCThird Party Advisory
https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt		x_refsource_CONFIRMRelease NotesThird Party Advisory
https://wordpress.org/plugins/formidable/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9935		x_refsource_MISCThird Party Advisory