Advisories · Technology
Formidable Forms.
Every CVE that names Formidable Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS
- Formidable Forms
- Denial of service
- CVSS 4.8 Medium
Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token
- Formidable Forms
- Other injection
- CVSS 4.3 Medium
Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter
- Formidable Forms
- CWE-345
- CVSS 5.9 Medium
Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
- Formidable Forms
- CWE-345
- CVSS 4.8 Medium
Formidable Forms < 6.14.1 - Admin+ Stored XSS
- Formidable Forms
- CVSS 7.5 High
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
- Formidable Forms
-
Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
- Formidable Forms
- CVSS 6.5 Medium
Formidable Forms < 6.1 - IP Spoofing
- Formidable Forms