Filter
Formidable FormsWordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability
9.8
First published (updated )
Formidable FormsFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter
6.1
First published (updated )
Formidable FormsFormidable Forms < 6.14.1 - Admin+ Stored XSS
4.8
EPSS
0.04%
First published (updated )
Formidable FormsFormidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
5.3
First published (updated )
Formidable FormsFormidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
5.4
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Formidable FormsWordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability
6.1
First published (updated )
Formidable FormsFormidable Forms < 6.2 - Unauthenticated PHP Object Injection
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Formidable FormsFormidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
8.8
First published (updated )
Formidable FormsFormidable Forms < 6.1 - IP Spoofing
6.5
First published (updated )
Formidable FormsWordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Formidable FormsFormidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting
9.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Formidable FormsFormidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
4.8
First published (updated )
Formidable FormsThe formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
9.8
First published (updated )