CVE-2023-1405

CVE-2023-1405: Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

Vendor Unknown
Product Formidable Forms
Published January 16, 2024
Last update June 11, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

Key dates

02Disclosure timeline

January 16, 2024 CVE published
June 11, 2025 Record updated