high7.5
CVE-2023-1405
The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gad…
Impact
The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strategy11 | Formidable Forms | before 6.2 |