Strategy11 Formidable Forms vulnerabilities

• strategy11 formidable forms WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability CVE-2022-45806 4.3 MediumDecember 13, 2024
• strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter CVE-2024-11188 6.1 MediumNovember 23, 2024
• strategy11 formidable forms Formidable Forms < 6.14.1 - Admin+ Stored XSS CVE-2024-9768 4.8 MediumNovember 21, 2024
• strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure CVE-2017-20194 5.3 MediumOctober 16, 2024
• strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting CVE-2017-20192 Public exploit 8.3 HighOctober 16, 2024
• strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-6725 4.9 MediumJuly 31, 2024
• strategy11 formidable forms WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability CVE-2024-23522 5.3 MediumMay 17, 2024
• strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-0660 6.1 MediumFebruary 5, 2024
• strategy11 formidable forms Formidable Forms < 6.2 - Unauthenticated PHP Object Injection CVE-2023-1405 Public exploit 7.5 HighJanuary 16, 2024
• strategy11 formidable forms Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution CVE-2023-2877 Public exploit EPSS 22.5% 8.8 HighJune 27, 2023