cleantalk
Vulnerabilities and Security Researches

Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, CVE-2023-0816

CVE, Research URL

CVE-2023-0816

Published on
Mar 27, 2023
Research Description
The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.
Affected versions
max 6.1.
Status
vulnerable