CVE-2022-45806: WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

Q: What is the severity of CVE-2022-45806?

CVE-2022-45806 is classified as a missing authorization vulnerability with the potential to exploit incorrectly configured access control security levels.

Q: How do I fix CVE-2022-45806?

To fix CVE-2022-45806, update the Formidable Forms plugin to the latest version beyond 5.5.4.

Q: Who is affected by CVE-2022-45806?

CVE-2022-45806 affects users of the Formidable Forms plugin for WordPress versions up to and including 5.5.4.

Q: What kind of vulnerability is CVE-2022-45806?

CVE-2022-45806 is a broken access control vulnerability that can lead to unauthorized access to sensitive features.

Q: When was CVE-2022-45806 reported?

CVE-2022-45806 was reported for the Formidable Forms plugin, affecting various versions until the fix was implemented.

Published Dec 13, 2024

Updated

Missing Authorization vulnerability in Strategy11 Team Formidable Forms formidable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through <= 5.5.4.

Affected Software

3 affected components

Strategy11 Formidable Forms Wordpress<5.5.5

Strategy11 Formidable Forms<=5.5.4

WordPress Formidable Forms<=5.5.4

Remediation

Information

Update the WordPress Formidable Form Builder plugin to the latest available version (at least 5.5.5).

Event History

Dec 13, 2024

CVE Published

via MITRE·02:22 PM

Data Sourced

via MITRE·02:22 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-45806?

CVE-2022-45806 is classified as a missing authorization vulnerability with the potential to exploit incorrectly configured access control security levels.

How do I fix CVE-2022-45806?

To fix CVE-2022-45806, update the Formidable Forms plugin to the latest version beyond 5.5.4.

Who is affected by CVE-2022-45806?