Executive brief
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Affected products
- Packagist verbb/formie
Junglewise Threat Intelligence
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Severity: low · CVSS 3.1 · Published 2026-07-17
Technologies: verbb/formie (Packagist). Vendors: Packagist.
Related threats
- Verbb Formie missing authorization in administrative settings
- Verbb Formie server-side template injection in Hidden fields
- Formie has XSS vulnerability for email notification content for preview
- Formie has XSS vulnerability for importing forms
- verbb/formie Server-Side Template Injection for variable-enabled settings