CVE-2019-15780

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-29

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Formidable Form Builder (Strategy11)

References

• https://pentest.co.uk/labs/advisory/cve-2019-15780/
• https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt
• https://wordpress.org/plugins/formidable/#developers
• https://wpvulndb.com/vulnerabilities/9935