Strategy11 / Formidable Forms
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2022-45806 | WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability | CRITICAL | 9.8 | Dec 13, 2024 |
| CVE-2024-11188 | Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HT… | MEDIUM | 6.1 | Nov 23, 2024 |
| CVE-2024-9768 | Formidable Forms < 6.14.1 - Admin+ Stored XSS | MEDIUM | 4.8 | Nov 21, 2024 |
| CVE-2017-20194 | Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure | MEDIUM | 5.3 | Oct 16, 2024 |
| CVE-2017-20192 | Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting | HIGH | 8.3 | Oct 16, 2024 |
| CVE-2024-6725 | Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting | MEDIUM | 5.4 | Jul 31, 2024 |
| CVE-2024-23522 | WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability | MEDIUM | 6.1 | May 17, 2024 |
| CVE-2024-0660 | Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting | MEDIUM | 6.1 | Feb 5, 2024 |
| CVE-2023-1405 | Formidable Forms < 6.2 - Unauthenticated PHP Object Injection | HIGH | 7.5 | Jan 16, 2024 |
| CVE-2023-2877 | Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution | HIGH | 8.8 | Jun 27, 2023 |
Showing 1 to 10 of 10 CVEs