Skip to content
Unknown Forminator vulnerabilities
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts
CVE-2026-87071
5.3 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing
CVE-2026-87070
5.3 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link
CVE-2026-87074
3.7 Low
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe
CVE-2026-87069
3.1 Low
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import
CVE-2026-87068
6.6 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection
CVE-2026-87067
8.5 High
-
unknown forminator forms
Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation
CVE-2026-19220
3.7 Low
-
unknown forminator forms
Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
CVE-2026-19222
6.6 Medium
-
unknown forminator forms
Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
CVE-2026-19221
7.2 High
-
unknown forminator forms
Forminator < 1.38.3 - Admin+ Stored XSS
CVE-2024-7052
4.8 Medium
-
incsub forminator
Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting
CVE-2023-5119
4.8 Medium
-
incsub forminator
Forminator < 1.24.4 - Reflected XSS
CVE-2023-3134
6.1 Medium
-
incsub forminator
Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote
CVE-2023-2010
3.1 Low
-
incsub forminator, unknown forminator – contact form, payment form & custom form builder +1 more
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
CVE-2021-24700
4.8 Medium