CVE-2022-45806

The Formidable Forms plugin through version 5.5.4 contains a cross-site request forgery vulnerability that could enable attackers to trick authenticated users with elevated privileges into performing unintended actions, such as changing administrator passwords to gain unauthorized access. An attacker could exploit this flaw by crafting a malicious request that, when clicked by an admin user, would execute changes to the site without the user's knowledge or consent. The vulnerability was addressed in version 5.5.5 and users are advised to upgrade immediately.

Based on public CVE data (MITRE/NVD).