Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: strategy11team

CVE IDTitleCVSSSeverityPublished
CVE-2026-2888 Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter CWE-639 5.3 Medium2026-03-13
CVE-2026-2890 Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse CWE-862 7.5 High2026-03-13
CVE-2024-11188 Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter CWE-79 6.1 Medium2024-11-23
CVE-2017-20194 Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure CWE-200 5.3 Medium2024-10-16
CVE-2017-20192 Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting CWE-79 8.3 High2024-10-16
CVE-2024-6725 Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-79 4.9 Medium2024-07-31
CVE-2024-0660 Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CWE-352 6.1 Medium2024-02-05
CVE-2023-6830 Formidable Forms <= 6.7 - HTML Injection CWE-79 6.5 Medium2024-01-09
CVE-2023-6842 Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium2024-01-09

All 9 known CVE vulnerabilities affecting Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder with full Chinese analysis, references, and POCs where available.