strategy11 formidable forms vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

The Formidable Forms WordPress plugin prior to 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions ...

Strategy11 Formidable Forms

1 Github repository

7.5

CVSSv3

The Formidable Forms WordPress plugin prior to 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

Strategy11 Formidable Forms

4.3

CVSSv3

The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.7.2. This is due to missing or incorrect nonce validation on the up...

Strategy11 Formidable Forms

8.8

CVSSv3

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions.

Strategy11 Formidable Form Builder

6.5

CVSSv3

The Formidable Forms WordPress plugin prior to 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.

Strategy11 Formidable Form Builder

4.8

CVSSv3

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin prior to 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capabili...

Strategy11 Formidable Form Builder

6.1

CVSSv3

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Pa...

Strategy11 Formidable Form Builder

4.8

CVSSv3

The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name field label and description field label parameter in all versions up to 6.7 (inclusive) due t...

Strategy11 Formidable Form Builder

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook