Skip to contentStrategy11team Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder vulnerabilities
- strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builderFormidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' ParameterCVE-2026-28885.3 Medium
- strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builderFormidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent ReuseCVE-2026-28907.5 High
- strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form ParameterCVE-2024-111886.1 Medium
- strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 moreFormidable Form Builder < 2.05.03 - Unauthenticated Information DisclosureCVE-2017-201945.3 Medium
- strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 moreFormidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site ScriptingCVE-2017-20192Public exploit8.3 High
- strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-67254.9 Medium
- strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2024-06606.1 Medium
- strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-68424.4 Medium
- strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.7 - HTML InjectionCVE-2023-68306.5 Medium