Vulnerabilities > CVE-2023-2877 - Unspecified vulnerability in Strategy11 Formidable Forms

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

strategy11

NVD

Published: 2023-06-27

Updated: 2023-11-07

Summary

The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the WordPress.org plugin repository onto the site, leading to Remote Code Execution.

Vulnerable Configurations

Part	Description	Count
Application	Strategy11 Strategy11 Formidable Forms 5.0.06 Strategy11 Formidable Forms 5.0.07 Strategy11 Formidable Forms 5.0.08 Strategy11 Formidable Forms 5.0.09 Strategy11 Formidable Forms 5.0.10 Strategy11 Formidable Forms 5.0.11 Strategy11 Formidable Forms 5.0.12 Strategy11 Formidable Forms 5.0.13 Strategy11 Formidable Forms 5.0.13.1 Strategy11 Formidable Forms 5.0.14 Strategy11 Formidable Forms 5.0.15 Strategy11 Formidable Forms 5.0.16 Strategy11 Formidable Forms 5.0.17 Strategy11 Formidable Forms 5.1 Strategy11 Formidable Forms 5.2 Strategy11 Formidable Forms 5.2.01 Strategy11 Formidable Forms 5.2.02 Strategy11 Formidable Forms 5.2.02.01 Strategy11 Formidable Forms 5.2.03 Strategy11 Formidable Forms 5.2.04 Strategy11 Formidable Forms 5.2.05 Strategy11 Formidable Forms 5.2.06 Strategy11 Formidable Forms 5.2.07 Strategy11 Formidable Forms 5.3 Strategy11 Formidable Forms 5.3.1 Strategy11 Formidable Forms 5.3.2 Strategy11 Formidable Forms 5.4 Strategy11 Formidable Forms 5.4.1 Strategy11 Formidable Forms 5.4.2 Strategy11 Formidable Forms 5.4.3 Strategy11 Formidable Forms 5.4.4 Strategy11 Formidable Forms 5.4.5 Strategy11 Formidable Forms 5.5 Strategy11 Formidable Forms 5.5.1 Strategy11 Formidable Forms 5.5.2 Strategy11 Formidable Forms 5.5.3 Strategy11 Formidable Forms 5.5.3.1 Strategy11 Formidable Forms 5.5.4 Strategy11 Formidable Forms 5.5.5 Strategy11 Formidable Forms 5.5.6 Strategy11 Formidable Forms 5.5.7 Strategy11 Formidable Forms 6.0 Strategy11 Formidable Forms 6.0.1 Strategy11 Formidable Forms 6.1 Strategy11 Formidable Forms 6.1.1 Strategy11 Formidable Forms 6.1.2 Strategy11 Formidable Forms 6.2 Strategy11 Formidable Forms 6.2.1 Strategy11 Formidable Forms 6.2.2 Strategy11 Formidable Forms 6.2.3 Strategy11 Formidable Forms 6.3	51

References

https://wpscan.com/vulnerability/33765da5-c56e-42c1-83dd-fcaad976b402