PULSE
EN VIVO40señales / 24h
EN
FEED
ransomkrybit reclama a reflet2000.fr · FR · Otherransomkrybit reclama a www.actini.com · FR · Technologyransomkrybit reclama a www.ernat-bureau-etudes.fr · FR · Professional Servicesransomkrybit reclama a www.serengetiestates.co.za · ZA · Not Foundransomkrybit reclama a www.hymiasa.com · PE · Otherransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomkrybit reclama a reflet2000.fr · FR · Otherransomkrybit reclama a www.actini.com · FR · Technologyransomkrybit reclama a www.ernat-bureau-etudes.fr · FR · Professional Servicesransomkrybit reclama a www.serengetiestates.co.za · ZA · Not Foundransomkrybit reclama a www.hymiasa.com · PE · Otherransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilities
← Todos los CVEs
CVE Watch6 ago 2026

CVE-2026-11361

The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it

CVSS

5.9

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 ago 2026 · Última mod.: 6 ago 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing unauthenticated users to bypass payment and trigger paid form actions — such as digital content access, license delivery, and membership activation — without being charged.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.

CVE-2026-11361 — The Formidable Forms WordPress plugin before 6.32.1 does not properly validate t · Pulse | Pulse