WordPress Plugin Vulnerabilities
Formidable Forms < 2.05.03 - Multiple Vulnerabilities
Description
The plugin was affected by Multiple Vulnerabilities:
- Unauthenticated preview function allowing shortcodes
- SQL injection
- Unauthenticated form entries retrieval
- Reflected XSS in form preview
- Stored XSS in form entries
- Server-side code execution via iThemes Sync
Affects Plugins
Fixed in 2.05.03 References
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2017-11-13 (about 8 years ago)
Added
2017-11-16 (about 8 years ago)
Last Updated
2021-10-06 (about 4 years ago)
WPScan 