Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, eefd255d525d60fa66e2255614dcfaa8aebb7f25
- CVE, Research URL
- Home page URL
- Application
- Published on
- Dec 21, 2022
- Research Description
- Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder [formidable] < 5.5.5 WordPress Formidable Forms Plugin <= 5.5.4 is vulnerable to Cross Site Request Forgery (CSRF) Update the WordPress Formidable Form Builder plugin to the latest available version (at least 5.5.5). Wordfence discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Formidable Forms Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has been fixed in version 5.5.5.
- Affected versions
-
max 5.5.5.
- Status
-
vulnerable