Unknown Forminator Forms

• CVE-2026-87071 Medium 5.3 Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts 0.3%
• CVE-2026-87070 Medium 5.3 Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing 0.2%
• CVE-2026-87074 Low 3.7 Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link 0.2%
• CVE-2026-87069 Low 3.1 Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe 0.2%
• CVE-2026-87068 Medium 6.6 Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import 0.4%
• CVE-2026-87067 High 8.5 Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection 0.5%
• CVE-2026-19220 Low 3.7 Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation 0.2%
• CVE-2026-19222 Medium 6.6 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass 0.4%
• CVE-2026-19221 High 7.2 Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite 0.7%
• CVE-2024-7052 Medium 4.8 Forminator < 1.38.3 - Admin+ Stored XSS 0.3%