CVE-2023-0816

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2023-03-27

Last modified

2025-02-19

Weaknesses

CWE-290

Affected products

• Formidable Form Builder (Strategy11)
• Formidable Forms (Unknown)

References

• https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744