SZB-2ea95356c4
Formidable Forms WordPress plugin arbitrary plugin installation flaw (EUVD-2026-113736)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- strategy11team
- Product
- Formidable Forms
- First seen
Summary
An EUVD entry (EUVD-2026-113736, CVSS v3.1 8.8) describes an arbitrary plugin installation vulnerability in the Formidable Forms WordPress plugin. The item's text is truncated, so the affected versions are not stated in the excerpt.
If you use strategy11team
Update Formidable Forms to the latest patched version
Review installed plugins for unexpected additions
Check site logs for unauthorized plugin installation activity
What the sources say 1
· Mastodon: “The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Arbitrary Plugin Installation in...” Source