PT-2023-16545 · WordPress · Formidable Forms

Daniel Ruf · Published 2023-03-27 · Updated 2025-02-19 · CVE-2023-0816

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Formidable Forms WordPress plugin versions prior to 6.1

Description The issue allows IP Address spoofing and bypass of anti-spam protections by using several potentially untrusted headers to determine the client's IP address.

Recommendations For versions prior to 6.1, update to version 6.1 or later to resolve the issue.

Exploit

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-0816

Affected Products

Formidable Forms

References · 5

• 🔥 https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0816 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0816 · Vendor Advisory
• https://t.me/cvenotify/111769 · Telegram Post
• https://t.me/cibsecurity/60808 · Telegram Post