CVE-2017-20194

published 2024-10-16

CVE-2017-20194: The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview…

Priority P2 78 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

ITW EXPLOIT VulnCheck KEV

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
strategy11	formidable_form_builder	<= 2.05.03	—

Detection & IOCs extracted from sources · hover to see the quote

url /wp-content/plugins/formidable/readme.txt↗

path /wp-content/plugins/formidable/↗

• → Detect vulnerable Formidable Form Builder installations by requesting the readme.txt file and extracting the 'Stable tag' version, then comparing it against versions < 2.05.03. ↗
• → The vulnerable AJAX action is 'frm_forms_preview'; unauthenticated requests to this action can trigger sensitive data exposure. ↗
• → Version extraction from readme.txt body using regex pattern matching 'Stable tag: ([0-9.]+)' can confirm vulnerable plugin versions below 2.05.03. ↗
• → Confirm plugin presence by checking that the response body contains the string 'Formidable Forms' and returns HTTP 200. ↗

• · The vulnerability affects Formidable Form Builder versions up to and including 2.05.03; version 2.05.04 and later are patched. ↗

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

vulncheck 5.3 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200