Skip to content
Strategy11 Formidable Form Builder vulnerabilities
-
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
CVE-2017-20194
5.3 Medium
-
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
CVE-2017-20192
Public exploit
8.3 High
-
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-6842
4.4 Medium
-
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more
Formidable Forms <= 6.7 - HTML Injection
CVE-2023-6830
6.5 Medium
-
unknown formidable forms, strategy11 formidable form builder +1 more
Formidable Forms < 6.1 - IP Spoofing
CVE-2023-0816
6.5 Medium
-
strategy11 form builder team formidable forms, strategy11 formidable form builder +1 more
WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24419
7.1 High
-
strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 more
Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting
CVE-2021-24884
Public exploit
9.6 Critical
-
strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 more
Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
CVE-2021-24608
4.8 Medium
-
strategy11 formidable form builder
The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
CVE-2019-15780
9.8 Critical