CVE Database /
CVE-2026-11361
CVE · Medium
CVE-2026-11361 — Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 6.32.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-11361
|
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More [formidable] < 6.32.1 |
Insufficient Verification of Data Authenticity |
Medium
5.9
|
< 6.32.1
|
6.32.1 |
2026-08-06 |
—
|
CVE-2026-11361
Prior to version 6.32.1 of Formidable Forms for WordPress, the plugin failed to verify the current state of a PayPal subscription payment before deeming it complete. As a result, unauthorized individuals could circumvent payment requirements and initiate paid form actions, including granting access to digital content or activating memberships, without incurring any charges.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings