CVE-2023-0816

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published: Mar 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-08177.8Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.CVE-2023-08185.5Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.CVE-2023-08197.8Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.CVE-2023-08208.8The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to CVE-2023-08216.5HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause exce CVE-2023-08228.8The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to b CVE-2023-08235.4The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes b CVE-2023-08246.5The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as we CVE-2023-08275.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.CVE-2023-08286.1Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferr CVE-2023-08299.0Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additio CVE-2023-08308.8A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipula