Security
فارسی
All products

verbb/formie

Composer · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentialsCVE-2026-76086 · GHSA-V3F3-CMJ4-CVJ9 verbb/formie Composer High Fix reported
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configurationGHSA-CVPC-HCCG-WMW4 verbb/formie Composer Medium Fix reported
Formie: Missing authorization on sent notification resend modal exposes submission PIICVE-2026-76089 · GHSA-9RG8-2WVR-FGJH verbb/formie Composer High Fix reported
Formie: Unauthenticated users can overwrite incomplete submissions via submit actionCVE-2026-76087 · GHSA-584P-F93J-WPGC verbb/formie Composer High Fix reported
Formie: Pre-authenticated server-side template injection in Hidden fieldsCVE-2026-45697 · GHSA-X7M9-MWC2-G6W2 verbb/formie Composer Critical Fix reported
formie's unauthenticated front-end submission editing can overwrite existing submissionsCVE-2026-47266 · GHSA-PGXQ-P76C-X9CG verbb/formie Composer High Fix reported
verbb/formie Server-Side Template Injection for variable-enabled settingsCVE-2024-35191 · GHSA-V45M-HXQP-FWF5 verbb/formie Composer Medium Fix reported
Formie Hidden field defaults vulnerable to Server-Side Template InjectionCVE-2026-52889 · GHSA-565M-G33J-JQ96 verbb/formie Composer Critical Fix reported
Formie has XSS vulnerability for importing formsCVE-2025-32427 · GHSA-P9HH-MH5X-WVX3 verbb/formie Composer Medium Fix reported
Formie has XSS vulnerability for email notification content for previewCVE-2025-32426 · GHSA-2XM2-23FF-P8WW verbb/formie Composer Medium Fix reported