Unknown Formidable Forms vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20264

Newest CVEs

• CVE-2026-85642

  Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

  Unknown · Formidable Forms

  High7.5
• CVE-2026-19857

  Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token

  Unknown · Formidable Forms

  Medium4.8
• CVE-2026-85641

  Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter

  Unknown · Formidable Forms

  Medium4.3
• CVE-2026-11361

  Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status

  Unknown · Formidable Forms

  Medium5.9
• CVE-2024-9768

  Formidable Forms < 6.14.1 - Admin+ Stored XSS

  Unknown · Formidable Forms

  Medium4.8
• CVE-2023-1405

  Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

  Unknown · Formidable Forms

  High7.5
• CVE-2023-2877

  Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

  Unknown · Formidable Forms

  High8.8
• CVE-2023-0816

  Formidable Forms < 6.1 - IP Spoofing

  Unknown · Formidable Forms

  Medium6.5