CVE-2023-1405

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

Score

CVSS 3.1 7.5 High

Status

Modified - contact@wpscan.com

Published

2024-01-16

Last modified

2025-06-11

Weaknesses

CWE-502

Affected products

• Formidable Forms (Strategy11)
• Formidable Forms (Unknown)

References

• https://wpscan.com/vulnerability/8c727a31-ff65-4472-8191-b1becc08192a/