A vulnerability categorized as problematic has been discovered in strategy11team Formidable Forms Plugin up to 6.28 on WordPress. This affects the function
verify_intent. The manipulation results in missing authorization.
This vulnerability is known as CVE-2026-2890. It is possible to launch the attack remotely. No exploit is available.