Formidable Forms
Strategy11 · 10 CVEs
WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability
Dec 13, 2024
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Refl…
Nov 23, 2024
Formidable Forms < 6.14.1 - Admin+ Stored XSS
Nov 21, 2024
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
Oct 16, 2024
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
Oct 16, 2024
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Jul 31, 2024
WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability
May 17, 2024
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Feb 5, 2024
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
Jan 16, 2024
Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
Jun 27, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-45806 | WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability | CRITICAL | 0.52% | Dec 13, 2024 |
| CVE-2024-11188 | Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HT… | MEDIUM | 0.40% | Nov 23, 2024 |
| CVE-2024-9768 | Formidable Forms < 6.14.1 - Admin+ Stored XSS | MEDIUM | 0.43% | Nov 21, 2024 |
| CVE-2017-20194 | Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure | MEDIUM | 1.13% | Oct 16, 2024 |
| CVE-2017-20192 | Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting | HIGH | 1.09% | Oct 16, 2024 |
| CVE-2024-6725 | Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting | MEDIUM | 0.37% | Jul 31, 2024 |
| CVE-2024-23522 | WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability | MEDIUM | 0.34% | May 17, 2024 |
| CVE-2024-0660 | Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting | MEDIUM | 0.21% | Feb 5, 2024 |
| CVE-2023-1405 | Formidable Forms < 6.2 - Unauthenticated PHP Object Injection | HIGH | 0.70% | Jan 16, 2024 |
| CVE-2023-2877 | Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution | HIGH | 22.45% | Jun 27, 2023 |
Showing 1 to 10 of 10 CVEs