Strategy11 Formidable Form Builder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

Published 2019-08-29 · Modified

9.8EPSS 0.024

Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting

Published 2021-10-25 · Modified

9.6EPSS 0.031

WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)

Published 2023-02-28 · Modified

8.8EPSS 0.003

Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

Published 2024-10-16 · Analyzed

8.3EPSS 0.011

Formidable Forms < 6.1 - IP Spoofing

Published 2023-03-27 · Modified

6.5EPSS 0.005

Formidable Forms <= 6.7 - HTML Injection

Published 2024-01-09 · Modified

6.5EPSS 0.004

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

Published 2024-10-16 · Analyzed

5.3EPSS 0.011

Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

Published 2021-10-25 · Modified

4.8EPSS 0.007

Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published 2024-01-09 · Modified

4.8EPSS 0.003