CVE-2023-2877

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:19+00:00| seen| https://t.me/CVEhub/15926 2026-07-30 00:00:40+00:00| seen| https://t.me/CVEhub/15926 2026-07-31 00:00:36+00:00| published-proof-of-concept| https://t.me/CVEhub/15926...

CVE-2023-2877 Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the...

CVE-2023-2877

The Formidable Forms WordPress plugin versions prior to 6.3.1 is vulnerable to Remote Code Execution (RCE) due to insufficient validation of the plugin URL and inadequate user authorization during the add-on installation process. This allows a user with a role as low as Subscriber to install and ...

CVE-2023-2877 Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the...

WordPress Formidable Forms Plugin < 6.3.1 is vulnerable to Remote Code Execution (RCE)

Software Formidable Forms Type Plugin Vulnerable versions 6.3.1 Fixed in 6.3.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-2877 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 64ee0a3444e8 Credits Alex Sanford Required privilege...