CVE-2023-0816

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.
Configurations

Configuration 1 (hide)

cpe:2.3:a:strategy11:formidable_form_builder:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:37

Type Values Removed Values Added
References () https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744 - Exploit, Third Party Advisory () https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744 - Exploit, Third Party Advisory

07 Nov 2023, 04:01

Type Values Removed Values Added
CWE CWE-290

Information

Published : 2023-03-27 16:15

Updated : 2024-11-21 07:37


NVD link : CVE-2023-0816

Mitre link : CVE-2023-0816

CVE.ORG link : CVE-2023-0816


JSON object : View

Products Affected

strategy11

  • formidable_form_builder
CWE
CWE-290

Authentication Bypass by Spoofing