CVE-2026-85642: Formidable Forms 6.5 to before 7.0

Affected technology

Formidable Forms · 6.5 to before 7.0
Vendor not specified by the source

Description’s affected range: before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can consume the daily allowance and cause legitimate verification attempts to be refused for the next 24 hours.