CVE-2026-121722: WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP E-Signature Formidable Forms Signature Online Contract Automation forms-signature-formidable-online-contract-automation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms Signature Online Contract Automation: from n/a through 2.0.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Formidable Forms Signature Online Contract Automationto a version that resolves this vulnerability.Fixed in 2.0.6
Event History
Frequently Asked Questions
Which installations are affected?
The issue affects Formidable Forms Signature Online Contract Automation versions through 2.0.5. The available data does not identify a fixed version.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely security impact?
The vulnerability has high confidentiality impact. The provided vector indicates no integrity or availability impact and an unchanged scope.