Description
The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Formidable Forms | < 6.1 | 6.1 |
References
- https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744 exploit vdb-entry technical-description