What’s Vulnerable › Products

verbb formie vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your verbb formie version is affected

Latest verbb formie vulnerabilities

• CVE-2026-76089 — Formie: Missing authorization on sent notification resend modal exposes submission PII (CVSS 7.7)
• CVE-2026-76087 — Formie: Unauthenticated users can overwrite incomplete submissions via submit action (CVSS 8.2)
• CVE-2026-76086 — Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials (CVSS 8.5)
• CVE-2026-52889 — Formie: Server-Side Template Injection in Formie Hidden field defaults (CVSS 9.8)
• CVE-2026-47266 — Formie: Unauthenticated front-end submission editing can overwrite existing submissions (CVSS 8.7)
• CVE-2026-45697 — Formie: Pre-authenticated server-side template injection in Hidden fields (CVSS 9.8)
• CVE-2025-32427 — Formie has a XSS vulnerability for importing forms (CVSS 5.4)
• CVE-2025-32426 — Formie has a XSS vulnerability for email notification content for preview (CVSS 5.4)
• CVE-2024-35191 — verbb/formie Server-Side Template Injection for variable-enabled settings (CVSS 4.4)