CVE-2023-1405

Publication date

2024-01-16 15:56:18

Family

WPScan

State

PUBLISHED

Description

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.