← Database

CVE-2023-1405

HIGH CVSS: 7.5 Published: 2024-01-16 Modified: 2026-06-17

Description

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

Affected Platforms

Strategy11 Formidable Forms

Weakness Type

CWE-502

References