Skip to content
Unknown Forminator Forms vulnerabilities
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts
CVE-2026-87071
5.3 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing
CVE-2026-87070
5.3 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link
CVE-2026-87074
3.7 Low
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe
CVE-2026-87069
3.1 Low
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import
CVE-2026-87068
6.6 Medium
-
unknown forminator forms
Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection
CVE-2026-87067
8.5 High
-
unknown forminator forms
Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation
CVE-2026-19220
3.7 Low
-
unknown forminator forms
Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
CVE-2026-19222
6.6 Medium
-
unknown forminator forms
Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
CVE-2026-19221
7.2 High
-
unknown forminator forms
Forminator < 1.38.3 - Admin+ Stored XSS
CVE-2024-7052
4.8 Medium