CVE-2026-2888 | strategy11team Formidable Forms Plugin up to 6.28 on WordPress AJAX generate_false_entry authorization

A vulnerability was found in strategy11team Formidable Forms Plugin up to 6.28 on WordPress. It has been declared as problematic. This impacts the function generate_false_entry of the component AJAX Handler. The manipulation results in authorization bypass.

This vulnerability is reported as CVE-2026-2888. The attack can be launched remotely. No exploit exists.