CVE-2026-65523

CVE-2026-65523 affects the WordPress plugin Formidable Forms Signature Online Contract Automation (versions

CVE-2026-65523: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

PT-2026-68541

Name of the Vulnerable Software and Affected Versions Formidable Forms Signature Online Contract Automation versions prior to 2.0.2 Description An Insecure Direct Object Reference IDOR exists due to missing validation on a user controlled key. This allows unauthenticated attackers to perform...