Skip to content
OpenAdvisories
High · 7.5 CVE-2026-121722 EUVD-2026-119992GHSA-2c8c-wwgq-j39v

WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.5 - Broken Access Control vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in WP E-Signature Formidable Forms Signature Online Contract Automation forms-signature-formidable-online-contract-automation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms Signature Online Contract Automation: from n/a through 2.0.5.

Affected products

VendorProductAffectedFixed
WP E-Signature Formidable Forms Signature Online Contract Automation ≤ 2.0.5 —

References