Unknown Formidable Forms vulnerabilities

• unknown formidable forms Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS CVE-2026-85642 7.5 HighOctober 21, 2026
• unknown formidable forms Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token CVE-2026-19857 4.8 MediumSeptember 16, 2026
• unknown formidable forms Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter CVE-2026-85641 4.3 MediumSeptember 16, 2026
• unknown formidable forms Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status CVE-2026-11361 5.9 MediumAugust 6, 2026
• strategy11 formidable forms WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability CVE-2022-45806 4.3 MediumDecember 13, 2024
• strategy11 formidable forms Formidable Forms < 6.14.1 - Admin+ Stored XSS CVE-2024-9768 4.8 MediumNovember 21, 2024
• strategy11 formidable forms WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability CVE-2024-23522 5.3 MediumMay 17, 2024
• strategy11 formidable forms Formidable Forms < 6.2 - Unauthenticated PHP Object Injection CVE-2023-1405 Public exploit 7.5 HighJanuary 16, 2024
• strategy11 formidable forms Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution CVE-2023-2877 Public exploit EPSS 22.5% 8.8 HighJune 27, 2023
• unknown formidable forms, strategy11 formidable form builder +1 more Formidable Forms < 6.1 - IP Spoofing CVE-2023-0816 6.5 MediumMarch 27, 2023
• strategy11 form builder team formidable forms, strategy11 formidable form builder +1 more WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-24419 7.1 HighFebruary 28, 2023