FF
Product
Formidable Form Builder
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 6Low 0
Watch
Add Formidable Form Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15780 | 9.8 | Aug 29 | The formidable plugin before 4.02.01 for WordPress has unsafe deserialization Affected: before 4.02.01 |
| CVE-2021-24884 | 9.6 | Oct 25 | The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img>,<a> and<button>.This could allow an unauthenticated,… Affected: before 4.09.05 |
| CVE-2023-24419 | 8.8 | Feb 28 | Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions Affected: before 5.5.7 |
| CVE-2023-0816 | 6.5 | Mar 27 | The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of… Affected: before 6.1 |
| CVE-2017-20192 | 6.1 | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting Affected: before 2.05.03 |
| CVE-2023-6830 | 6.1 | Jan 9 | The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7 Affected: through 6.7 |
| CVE-2017-20194 | 5.3 | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure Affected: through 2.05.03 |
| CVE-2023-6842 | 4.8 | Jan 9 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name… Affected: through 6.7 |
| CVE-2021-24608 | 4.8 | Oct 25 | The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged… Affected: before 5.0.07 |
Showing 9