Formidable Forms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FF

Product

Formidable Forms

by · last CVE Oct 21, 2026

8

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 3Medium 5Low 0

Severity

All severities8 Critical0 High3 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Formidable Forms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-0816	6.5	0%	Mar 27	Formidable Forms < 6.1 - IP Spoofing Affected: before 6.1
CVE-2026-11361	5.9	0%	Aug 6	Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status Affected: before 6.32.1
CVE-2026-19857	4.8	0%	Sep 16	Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token Affected: 6.34 before 6.35
CVE-2024-9768	4.8	0%	Nov 21	Formidable Forms < 6.14.1 - Admin+ Stored XSS Affected: before 6.14.1
CVE-2026-85641	4.3	0%	Sep 16	Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter Affected: 6.34 before 6.35