Security
فارسی
All products

formidable

WordPress · Plugin
29 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' ParameterCVE-2026-89435 formidable WordPress High Fix reported
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder < 7.0 - Unauthenticated Denial of ServiceCVE-2026-85642 formidable WordPress High Fix reported
Formidable Forms <= 6.34 - Unauthenticated Content InjectionCVE-2026-85641 formidable WordPress Medium Fix reported
Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-19857 formidable WordPress Medium Fix reported
Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' ParameterCVE-2026-18331 formidable WordPress High Fix reported
Formidable Forms <= 6.32.0 - Unauthenticated Payment BypassCVE-2026-11361 formidable WordPress Medium Fix reported
Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' ParameterCVE-2026-2888 formidable WordPress Medium Fix reported
Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent ReuseCVE-2026-2890 formidable WordPress High Fix reported
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.14 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-9768 formidable WordPress Medium Fix reported
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form ParameterCVE-2024-11188 formidable WordPress Medium Fix reported
Formidable Form Builder < 2.05.03 - Unauthenticated Information DisclosureCVE-2017-20194 formidable WordPress Medium Fix reported
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site ScriptingCVE-2017-20192 formidable WordPress High Fix reported
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-6725 formidable WordPress Medium Fix reported
Formidable Forms <= 6.7 - HTML InjectionCVE-2023-6830 formidable WordPress Medium Fix reported
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2024-0660 formidable WordPress Medium Fix reported
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-6842 formidable WordPress Medium Fix reported
Formidable Form Builder <= 2.0.21 - Missing Authorization Checks formidable WordPress Critical Fix reported
Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery formidable WordPress Medium Fix reported
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site ScriptingCVE-2021-24884 formidable WordPress Critical Fix reported
Formidable Form Builder <= 4.02 - PHP Object InjectionCVE-2019-15780 formidable WordPress Critical Fix reported