CVE Database /
CVE-2023-1405
CVE · High
CVE-2023-1405 — Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 6.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-1405
|
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 6.2 |
Deserialization of Untrusted Data |
High
7.5
|
< 6.2
|
6.2 |
2023-04-06 |
—
|
CVE-2023-1405
The Formidable Forms plugin for WordPress through version 6.1.2 allows unauthenticated users to perform PHP Object Injection attacks by submitting specially crafted form data that gets deserialized without proper validation. While the plugin itself lacks a Property-Oriented Programming chain to directly exploit this vulnerability, attackers could leverage POP chains from other installed plugins or themes to potentially delete files, access sensitive information, or execute arbitrary code on the system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings