Login Request a demo
FF
Product
Formidable Forms
by Strategy11 · last CVE Dec 13, 2024
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 2Medium 7Low 0
Severity
All severities10Critical1High2Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Formidable Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45806
9.8
1%
Dec 13
WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability
Affected: before 5.5.5
CVE-2023-2877
8.8
22%
Jun 27
The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons
Affected: before 6.3.1
CVE-2023-1405
7.5
1%
Jan 16
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
Affected: before 6.2
CVE-2024-11188
6.1
0%
Nov 23
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter
Affected: before 6.16.2
CVE-2017-20192
6.1
1%
Oct 16
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
Affected: before 2.05.03
CVE-2024-23522
6.1
0%
May 17
WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability
Affected: before 6.7.1
CVE-2024-6725
5.4
0%
Jul 31
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: before 6.11.2
CVE-2017-20194
5.3
1%
Oct 16
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
Affected: before 2.05.03
CVE-2024-9768
4.8
0%
Nov 21
Formidable Forms < 6.14.1 - Admin+ Stored XSS
Affected: before 6.14.1
CVE-2024-0660
4.3
0%
Feb 5
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Affected: through 6.7.2
Showing 10