CVE Database /
CVE-2019-15780
CVE · Critical
CVE-2019-15780 — Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 4.02.01
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-15780
|
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 4.02.01 |
Deserialization of Untrusted Data |
Critical
9.8
|
< 4.02.01
|
4.02.01 |
2019-08-09 |
—
|
CVE-2019-15780
The Formidable Form Builder plugin for WordPress contained an unsafe deserialization flaw in versions before 4.02.01 that allowed attackers to exploit the improper handling of serialized data. This vulnerability could be leveraged to execute arbitrary code or perform other malicious actions on affected WordPress installations. The issue stemmed from the plugin's failure to properly validate and sanitize serialized objects before processing them.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings