Multiple remote code execution vulnerabilities in the WordPress Formidable Forms plug-in

Release date:
Updated on:

Affected Systems:
WordPress Formidable Forms <1.06.03
WordPress Formidable Forms
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67390
 
The WordPress Formidable Forms plug-in allows you to easily and quickly build Forms.
 
Formidable Forms versions earlier than 1.06.03 did not properly filter user input. There is a remote code execution vulnerability in implementation. After successful exploitation, attackers can execute arbitrary code in the context of the affected application.
 
<* Source: Manish Tanwar
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Https://wordpress.org/plugins/formidable/
 
This article permanently updates the link address: