verbb formie vulnerabilities
9 published CVEs name verbb formie among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76087
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
verbb · formie
High8.2 - CVE-2026-76086
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
verbb · formie
High8.5 - CVE-2026-76089
Formie: Missing authorization on sent notification resend modal exposes submission PII
verbb · formie
High7.7 - CVE-2026-52889
Formie: Server-Side Template Injection in Formie Hidden field defaults
verbb · formie
Critical9.8 - CVE-2026-47266
Formie: Unauthenticated front-end submission editing can overwrite existing submissions
verbb · formie
High8.7 - CVE-2026-45697
Formie: Pre-authenticated server-side template injection in Hidden fields
verbb · formie
Critical9.8 - CVE-2025-32426
Formie has a XSS vulnerability for email notification content for preview
verbb · formie
Medium4.6 - CVE-2025-32427
Formie has a XSS vulnerability for importing forms
verbb · formie
Medium5.3 - CVE-2024-35191
verbb/formie Server-Side Template Injection for variable-enabled settings
verbb · formie
Medium4.4