CVE-2026-16230 | Critical | 9.8 | 2026-08-11 | The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in a… |
CVE-2022-45806 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2024-11188 | Medium | 6.1 | 2024-11-23 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to POST-Based Refle… |
CVE-2024-9768 | Medium | 4.8 | 2024-11-21 | The Formidable Forms WordPress plugin before 6.14.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2017-20194 | Medium | 5.3 | 2024-10-16 | The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview A… |
CVE-2017-20192 | High | 8.3 | 2024-10-16 | The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after… |
CVE-2024-6725 | Medium | 4.9 | 2024-07-31 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Sit… |
CVE-2024-31350 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1. |
CVE-2024-23522 | Medium | 5.3 | 2024-05-17 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Form Builder Team Formidable Forms allows Code Inject… |
CVE-2024-1290 | Medium | 6.5 | 2024-03-11 | The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them… |
CVE-2024-0660 | Medium | 6.1 | 2024-02-05 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forg… |
CVE-2023-1405 | High | 7.5 | 2024-01-16 | The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gad… |
CVE-2023-6842 | Medium | 4.4 | 2024-01-09 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip… |
CVE-2023-6830 | Medium | 6.5 | 2024-01-09 | The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated user… |
CVE-2023-41801 | Medium | 5.4 | 2023-10-06 | Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions. |
CVE-2023-2877 | High | 8.8 | 2023-06-27 | The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-on… |
CVE-2023-0816 | Medium | 6.5 | 2023-03-27 | The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address sp… |
CVE-2023-24419 | High | 7.1 | 2023-02-28 | Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions. |
CVE-2022-3254 | Critical | 9.8 | 2022-10-31 | The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an… |
CVE-2021-24884 | Critical | 9.6 | 2021-10-25 | The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img>,<a> and<button>.This could allow an u… |
CVE-2021-24608 | Medium | 4.8 | 2021-10-25 | The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allow… |
CVE-2021-24251 | Medium | 4.3 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowin… |
CVE-2021-24250 | Medium | 5.4 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Fo… |
CVE-2021-24249 | Medium | 6.5 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowin… |
CVE-2021-24248 | High | 7.2 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding cer… |
CVE-2021-24179 | High | 8.8 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing… |
CVE-2021-24178 | High | 8.8 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing… |
CVE-2019-15780 | Critical | 9.8 | 2019-08-29 | The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. |
CVE-2014-10013 | | | 2015-01-13 | SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the… |
CVE-2014-10012 | | | 2015-01-13 | Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web scrip… |