CVE-2023-0816

6.5 mediumEPSS 0.5%

Medium (6.5) in strategy11 formidable form builder. EPSS 0.5% chance of exploitation in the next 30 days.

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-290
Published: 2023-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

strategy11:formidable_form_builder

References

https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744
https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744

Check your stack JSON