WPMU DEV Forminator

• CVE-2026-116859 Medium 5.3 WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerability 0.2%
• CVE-2026-116858 Medium 4.3 WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability 0.2%
• CVE-2026-108486 Medium 5.3 WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability 0.2%
• CVE-2026-65459 High 7.5 WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability 0.3%
• CVE-2026-96341 High 8.2 WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability 0.3%
• CVE-2026-102388 High 7.1 WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-96336 High 7.5 WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability 0.3%
• CVE-2026-106611 High 7.1 WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2026-96335 High 7.5 WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability 0.2%
• CVE-2026-82220 Medium 5.3 WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability 0.3%
• CVE-2026-66583 Critical 9.8 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability 0.6%
• CVE-2026-28143 High 7.1 WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-28111 High 8.8 WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability 0.4%
• CVE-2026-56071 High 7.1 WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-45625 Medium 6.1 Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a c 0.4%
• CVE-2024-28890 Medium 5.3 Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessin 0.7%
• CVE-2024-31077 High 7.2 Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any informa 30.4%
• CVE-2024-31857 Medium 5.4 Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user 0.6%
• CVE-2021-36821 High 7.1 WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability 0.4%