FF
Product
Formidable Forms
7
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch
Add Formidable Forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2877 | 8.8 | Jun 27 | Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution Affected: before 6.3.1 |
| CVE-2026-85642 | 7.5 | Oct 21 | Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS Affected: 6.5 before 7.0 |
| CVE-2023-1405 | 7.5 | Jan 16 | Formidable Forms < 6.2 - Unauthenticated PHP Object Injection Affected: before 6.2 |
| CVE-2026-11361 | 5.9 | Aug 6 | Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status Affected: before 6.32.1 |
| CVE-2026-19857 | 4.8 | Sep 16 | Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token Affected: 6.34 before 6.35 |
| CVE-2024-9768 | 4.8 | Nov 21 | Formidable Forms < 6.14.1 - Admin+ Stored XSS Affected: before 6.14.1 |
| CVE-2026-85641 | 4.3 | Sep 16 | Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter Affected: 6.34 before 6.35 |
Showing 7