Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, 18d29339560dfec997e38032c4a4179eb1851985
- CVE, Research URL
- Home page URL
- Application
- Published on
- Feb 16, 2016
- Research Description
- Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder [formidable] < 2.0.22 Formidable Form Builder <= 2.0.21 - Missing Authorization Checks The Formidable Form Builder plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 2.0.21. This is due to missing nonce and capability checks on the 'frm_fill_licenses' and 'frm_ajax' AJAX actions. This makes it possible for unauthenticated attackers to access leaked nonces and modify form fields.
- Affected versions
-
max 2.0.22.
- Status
-
vulnerable