Unknown Formidable Forms

2 known vulnerabilities in Unknown Formidable Forms, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-19857 CVSS 4.8 medium The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser…
  • CVE-2026-85641 CVSS 4.3 medium The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form…