TI-2026-53255 CVE-2026-76087 · GHSA-584p-f93j-wpgc
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
Priority MEDIUM 42
Formie is a Craft CMS plugin for creating forms.
Vulnerabilities
16 records
TI-2026-53254 CVE-2026-76086 · GHSA-v3f3-cmj4-cvj9
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Priority LOW 37
Formie is a Craft CMS plugin for creating forms.
TI-2026-53256 CVE-2026-76089 · GHSA-9rg8-2wvr-fgjh
Formie: Missing authorization on sent notification resend modal exposes submission PII
Priority LOW 34
Formie is a Craft CMS plugin for creating forms.
TI-2026-37985 CVE-2026-52889 · GHSA-565m-g33j-jq96
Formie: Server-Side Template Injection in Formie Hidden field defaults
Priority MEDIUM 51
Formie is a Craft CMS plugin for creating forms.
TI-2026-34846 CVE-2026-47266 · GHSA-pgxq-p76c-x9cg
Formie: Unauthenticated front-end submission editing can overwrite existing submissions
Priority MEDIUM 43
Formie is a Craft CMS plugin for creating forms.
TI-2026-33438 CVE-2026-45697 · GHSA-x7m9-mwc2-g6w2
Formie: Pre-authenticated server-side template injection in Hidden fields
Priority MEDIUM 49
Formie is a Craft CMS plugin for creating forms.
TI-2025-23497 CVE-2025-32426 · GHSA-2xm2-23ff-p8ww
Formie has a XSS vulnerability for email notification content for preview
Priority LOW 24
Formie is a Craft CMS plugin for creating forms.
TI-2025-23498 CVE-2025-32427 · GHSA-p9hh-mh5x-wvx3
Formie has a XSS vulnerability for importing forms
Priority LOW 24
Formie is a Craft CMS plugin for creating forms.
TI-2024-23264 CVE-2024-35191 · GHSA-v45m-hxqp-fwf5
verbb/formie Server-Side Template Injection for variable-enabled settings
Priority LOW 20
Formie is a Craft CMS plugin for creating forms.
TI-2020-10852 CVE-2020-13868 · GHSA-4r8c-pj7x-m5jx
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
Priority LOW 29
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
TI-2020-10853 CVE-2020-13869 · GHSA-jhhf-c849-3rh2
An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS.
Priority LOW 25
An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS.
TI-2020-10854 CVE-2020-13870 · GHSA-69ww-wv3j-mhg4
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
Priority LOW 25
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
TI-2020-10575 CVE-2020-13485 · GHSA-wxvr-qqm7-6h65
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
Priority MEDIUM 42
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
TI-2020-10576 CVE-2020-13486 · GHSA-m69r-4h68-xq7j
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Priority LOW 28
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
TI-2020-10552 CVE-2020-13458 · GHSA-5v5q-3m7m-97j7
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
Priority LOW 39
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
TI-2020-10553 CVE-2020-13459 · GHSA-p7rm-gh9g-5fr8
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
Priority LOW 25
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.