What’s Vulnerable › Products
strategy11team Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder vulnerabilities
11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Latest strategy11team Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder vulnerabilities
- CVE-2026-2890 — Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse (CVSS 7.5)
- CVE-2026-2888 — Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter (CVSS 5.3)
- CVE-2017-20194 — Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure (CVSS 5.3)
- CVE-2017-20192 — Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2023-6842 — Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2023-6830 — Formidable Forms <= 6.7 - HTML Injection (CVSS 6.1)
- CVE-2023-0816 — Formidable Forms < 6.1 - IP Spoofing (CVSS 6.5)
- CVE-2023-24419 — WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2021-24884 — Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting (CVSS 9.6)
- CVE-2021-24608 — Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2019-15780 — (CVSS 9.8)