cleantalk
Vulnerabilities and Security Researches

Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, CVE-2023-1405

CVE, Research URL

CVE-2023-1405

Published on
Jan 16, 2024
Research Description
The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.
Affected versions
max 2.05.03.
Status
vulnerable