Login Request a demo
FO
Product
formie
by verbb · last CVE Sep 23, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 3Low 0
Severity
All severities9Critical2High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add formie to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-52889
9.8
1%
Aug 19
Formie: Server-Side Template Injection in Formie Hidden field defaults
Affected: < 3.1.27
CVE-2026-45697
9.8
0%
May 29
Formie: Pre-authenticated server-side template injection in Hidden fields
Affected: < 2.2.20; >= 3.0.0-beta.1, < 3.1.24
CVE-2026-47266
8.7
0%
May 29
Formie: Unauthenticated front-end submission editing can overwrite existing submissions
Affected: < 2.2.21; >= 3.0.0-beta.1, < 3.1.26
CVE-2026-76086
8.5
1%
Sep 23
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Affected: < 2.2.23; >= 3.0.0, < 3.1.31
CVE-2026-76087
8.2
0%
Sep 23
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
Affected: < 2.2.23; >= 3.0.0, < 3.1.31
CVE-2026-76089
7.7
0%
Sep 23
Formie: Missing authorization on sent notification resend modal exposes submission PII
Affected: < 2.2.23; >= 3.0.0, < 3.1.31
CVE-2025-32426
5.4
0%
Apr 11
Formie has a XSS vulnerability for email notification content for preview
Affected: < 2.1.44
CVE-2025-32427
5.4
0%
Apr 11
Formie has a XSS vulnerability for importing forms
Affected: < 2.1.44
CVE-2024-35191
4.4
0%
May 20
Formie is a Craft CMS plugin for creating forms
Affected: before 2.0.44; 2.1.0 before 2.1.6
Showing 9