Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

Güvenlik açıkları

• CVE-2022-45806

  WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2019-15780

  The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

  Kritik 9.8

• CVE-2023-24419

  WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-2890

  Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse

  Yüksek 7.5

• CVE-2026-18331

  Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter

  Yüksek 7.2

• CVE-2024-11188

  Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTM

  Orta 6.1

• CVE-2017-20192→ 2.05.03

  Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

  Orta 6.1

• CVE-2024-23522

  WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability

  Orta 6.1

• CVE-2023-6830

  Formidable Forms <= 6.7 - HTML Injection

  Orta 6.1

• CVE-2024-6725

  Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2026-2888

  Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter

  Orta 5.3

• CVE-2023-6842

  Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2024-0660

  Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

  Orta 4.3