CVE-2017-20194CWE-200

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

Medium · published October 16, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01128 · 65.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-10-16T07:31Z
EPSS history
Timeline
  • 16 OCT 07:31Z
    Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
    cvelistv5