How many Strategy11 formidable forms CVEs are in CISA KEV?

None of Strategy11 formidable forms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Strategy11 formidable forms are affected?

27 distinct Strategy11 formidable forms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Strategy11 formidable forms CVEs?

Strategy11 formidable forms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).

How many critical Strategy11 formidable forms vulnerabilities are there?

Strategy11 formidable forms has 1 critical and 4 high-severity CVEs.

What is the average severity of Strategy11 formidable forms CVEs?

The average CVSS base score across Strategy11 formidable forms's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Strategy11

11 CVEs

Strategy11 formidable forms Vulnerabilities

Name: Strategy11 formidable forms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for formidable forms by Strategy11.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.0

Avg CVSS

2023–2024

Last updated December 13, 2024

Overview

Strategy11 formidable forms has 11 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Strategy11 formidable forms, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Strategy11 formidable forms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Strategy11 formidable forms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of Strategy11 formidable forms's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Strategy11 formidable forms version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.05.032 CVEs
< 5.5.51 CVE
< 6.11.21 CVE
< 6.14.11 CVE
< 6.16.21 CVE
< 6.21 CVE
< 6.3.11 CVE
< 6.7.11 CVE
<= 5.5.41 CVE
<= 5.5.61 CVE
<= 6.71 CVE
<= 6.7.21 CVE
>= 5.5.51 CVE
>= 5.5.71 CVE
>= 6.7.11 CVE

Fixed in

2.05.032 CVEs
> 5.5.41 CVE
> 5.5.61 CVE
> 6.71 CVE
5.5.51 CVE
5.5.71 CVE
6.11.21 CVE
6.14.11 CVE
6.16.21 CVE
6.21 CVE
6.3.11 CVE
6.7.11 CVE

Find a version

11 CVEs

Sort

WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability
CVE-2022-45806
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2024-12-13
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter
CVE-2024-11188
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (32th pct)2024-11-23
Medium vulnerability · 2024-11-21
CVE-2024-9768
Public exploit
Patch
Medium · CVSS 4.8
EPSS 0.4% (34th pct)2024-11-21
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
CVE-2017-20194
Patch
CWE-200
Medium · CVSS 5.3
EPSS 1.1% (63th pct)2024-10-16
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
CVE-2017-20192
Public exploit
Patch
CWE-79
High · CVSS 8.3
EPSS 1.0% (60th pct)2024-10-16
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-6725
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.4% (30th pct)2024-07-31
WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability
CVE-2024-23522
Patch
CWE-80
Medium · CVSS 6.1
EPSS 0.3% (26th pct)2024-05-17
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2024-0660
Patch
CWE-352
Medium · CVSS 6.1
EPSS 0.2% (12th pct)2024-02-05
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
CVE-2023-1405
Public exploit
Patch
High · CVSS 7.5
EPSS 0.7% (50th pct)2024-01-16
High vulnerability · 2023-06-27
CVE-2023-2877
Public exploit
Patch
High · CVSS 8.8
EPSS 22.5% (97th pct)2023-06-27
WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24419
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (18th pct)2023-02-28

Common weakness types

The CWE weakness categories most often found in Strategy11 formidable forms CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Strategy11 formidable forms CVEs were published each year.

2023

2

2024

9

Other Strategy11 products

Browse vulnerabilities for other products by Strategy11.

AWP Classifieds11 CVEs formidable form builder9 CVEs Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder9 CVEs Business Directory6 CVEs business directory plugin - easy listing directories6 CVEs Business Directory Plugin – Easy Listing Directories for WordPress5 CVEs Tasty Recipes Lite2 CVEs another-wordpress-classifieds-plugin1 CVEs

All Strategy11 vulnerabilities

Frequently asked questions

Common questions about Strategy11 formidable forms vulnerabilities.

How many CVEs does Strategy11 formidable forms have?: Strategy11 formidable forms has 11 published CVE records since 2023.
How many Strategy11 formidable forms CVEs are in CISA KEV?: None of Strategy11 formidable forms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Strategy11 formidable forms vulnerabilities?: Yes — 4 of Strategy11 formidable forms's CVEs have a known public exploit.
Which versions of Strategy11 formidable forms are affected?: 27 distinct Strategy11 formidable forms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Strategy11 formidable forms CVEs?: Strategy11 formidable forms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).
How many critical Strategy11 formidable forms vulnerabilities are there?: Strategy11 formidable forms has 1 critical and 4 high-severity CVEs.
What is the average severity of Strategy11 formidable forms CVEs?: The average CVSS base score across Strategy11 formidable forms's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Strategy11 formidable forms vulnerabilities

Monitor new Strategy11 formidable forms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing