| CVE-2026-85642 |
The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the…
|
7.5
High
|
Oct 21, 2026 |
| CVE-2026-19857 |
The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress…
|
4.8
Medium
|
Sep 16, 2026 |
| CVE-2026-85641 |
The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user…
|
4.3
Medium
|
Sep 16, 2026 |
| CVE-2026-11361 |
The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription…
|
5.9
Medium
|
Aug 6, 2026 |
| CVE-2024-9768 |
The Formidable Forms WordPress plugin before 6.14.1 does not sanitise and escape some of its settings, which could…
|
4.8
Medium
|
Nov 21, 2024 |
| CVE-2023-1405 |
The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform…
|
7.5
High
|
Jan 16, 2024 |
| CVE-2023-2877 |
The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL…
|
Not rated
|
Jun 27, 2023 |
| CVE-2023-0816 |
The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP…
|
6.5
Medium
|
Mar 27, 2023 |