The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form.
id: CVE-2017-20194
info:
name: Formidable Form Builder < 2.05.03 - Unauthenticated Information Di
...