CVE-2026-85642: unknown formidable forms

CVSS: UnknownReceived
Published 21-10-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-85642 is a vulnerability in unknown formidable forms with no CVSS score yet. 1 public exploit is recorded.

Overall risk
10/100
0100
Low · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 21-10-2026
    PublishedVulnerability first disclosed.

Description

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to be refused for the next 24 hours.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (wpscan.com)

    Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Unknown1 product

1 vendor · 1 product

References

1 links