The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.Referenceshttps://wordpress.org/plugins/formidable/#developershttps://pentest.co.uk/labs/advisory/cve-2019-15780/https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txthttps://wpvulndb.com/vulnerabilities/9935