360 matches found
CVE-2023-28663
The Formidable PRO2PDF WordPress Plugin, versions prior to 3.11, contains an authenticated SQL injection in the fieldmap parameter of the fpropdf_export_file action. The root cause is improper handling of the fieldmap input, enabling arbitrary SQL execution when authenticated. This affects the pl...
CVE-2023-28663
The Formidable PRO2PDF WordPress Plugin, version 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdfexportfile action...
WordPress Formidable Forms Plugin < 6.1 is vulnerable to Bypass Vulnerability
Software Formidable Forms Type Plugin Vulnerable versions 6.1 Fixed in 6.1 OWASP Top 10 A1: Injection Classification Bypass Vulnerability CVE CVE-2023-0816 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9879bb5c0709 Credits Daniel Ruf Required privilege Unauthenticated...
Formidable Forms < 6.1 - IP Spoofing
The plugin uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections. PoC 1. In WordPress's Settings Discussion page, add your IP address to the Disallowed Comment Keys field. This will block form...
CVE-2023-24419
Cross-Site Request Forgery CSRF vulnerability in Strategy11 Form Builder Team Formidable Forms plugin = 5.5.6 versions...
CVE-2023-24419
Cross-Site Request Forgery CSRF vulnerability in Strategy11 Form Builder Team Formidable Forms plugin = 5.5.6 versions...
CVE-2023-24419
CVE-2023-24419 affects the WordPress Formidable Forms plugin (
CVE-2023-24419 WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Strategy11 Form Builder Team Formidable Forms plugin = 5.5.6 versions...
CVE-2023-24419 WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Strategy11 Form Builder Team Formidable Forms plugin = 5.5.6 versions...
PT-2023-19579 · WordPress · Formidable Forms
Name of the Vulnerable Software and Affected Versions: Formidable Forms plugin versions = 5.5.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicati...
WordPress plugin Formidable Forms 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
WordPress Formidable Forms Plugin <= 5.5.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Formidable Forms Type Plugin Vulnerable versions = 5.5.4 Fixed in 5.5.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-45806 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8708888535f1 Credits István Márton...
Formidable Forms < 5.5.7 - Arbitrary Entry Deletion via CSRF
The plugin does not have CSRF check when deleting entries, which could allow attackers to make logged in admins perform such action via a CSRF attack...
WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Formidable Forms Type Plugin Vulnerable versions = 5.5.6 Fixed in 5.5.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24419 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID ea449e0665e1 Credits Rafshanzani Suhada...
VulnCheck KEV: CVE-2023-2877
The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the...
Security Bulletin: Multiple vulnerabilities affect IBM Db2 On Openshift, IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data
Summary IBM has released the below fix for IBM Db2® On Openshift, IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. Vulnerability Details CVEID:CVE-2020-15187 DESCRIPTION: Helm could allow a remote...
WordPress plugin Formidable Forms 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
The vulnerability of Formidable’s library, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.
The vulnerability of Formidable’s library is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring instances may be vulnerable to code injection due to CVE-2022-29622
Summary Node.js module formidable is used internally by IBM App Connect Enterprise Certified Container DesignerAuthoring operands. This bulletin provides patch information to address the reported vulnerability CVE-2022-29622 in Node.js module formidable. Vulnerability Details CVEID:CVE-2022-29622...
