Verbb vulnerabilities

Products

• Formie 9
• Comments 3
• Image Resizer 2
• Knock Knock 2

Newest

• verbb formie Formie: Unauthenticated users can overwrite incomplete submissions via submit action CVE-2026-76087 Fix available 8.2 HighSeptember 23, 2026
• verbb formie Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials CVE-2026-76086 Fix available 8.5 HighSeptember 23, 2026
• verbb formie Formie: Missing authorization on sent notification resend modal exposes submission PII CVE-2026-76089 Fix available 7.7 HighSeptember 23, 2026
• verbb formie Formie: Server-Side Template Injection in Formie Hidden field defaults CVE-2026-52889 Fix available 9.8 CriticalJuly 6, 2026
• verbb formie Formie: Unauthenticated front-end submission editing can overwrite existing submissions CVE-2026-47266 Fix available 8.7 HighMay 29, 2026
• verbb formie Formie: Pre-authenticated server-side template injection in Hidden fields CVE-2026-45697 Fix available 9.8 CriticalMay 18, 2026
• verbb formie Formie has a XSS vulnerability for email notification content for preview CVE-2025-32426 Fix available 4.6 MediumApril 11, 2025
• verbb formie Formie has a XSS vulnerability for importing forms CVE-2025-32427 Fix available 5.3 MediumApril 11, 2025
• verbb formie verbb/formie Server-Side Template Injection for variable-enabled settings CVE-2024-35191 Fix available 4.4 MediumMay 20, 2024
• verbb comments Comments plugin Cross-Site Request Forgery (CSRF) CVE-2020-13868 Fix available 6.5 MediumJune 5, 2020
• verbb comments Comments plugin stored Cross-site Scripting via a guest name CVE-2020-13869 Fix available 5.4 MediumJune 5, 2020
• verbb comments Comments plugin stored Cross-site Scripting (XSS) via an asset volume name CVE-2020-13870 Fix available 5.4 MediumJune 5, 2020
• verbb knock knock Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header CVE-2020-13485 Fix available 9.1 CriticalMay 25, 2020
• verbb knock knock Knock Knock plugin Open redirection vulnerability CVE-2020-13486 Fix available 6.1 MediumMay 25, 2020
• verbb image resizer Image Resizer Cross-Site Request Forgery (CSRF) CVE-2020-13458 Fix available 8.8 HighMay 25, 2020
• verbb image resizer Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action CVE-2020-13459 Fix available 5.4 MediumMay 25, 2020