Skip to contentWpmu Dev - Your All-in-one Wordpress Platform Forminator vulnerabilities
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1159526.5 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerabilityCVE-2026-1168595.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Content Injection vulnerabilityCVE-2026-1168584.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerabilityCVE-2026-1084865.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerabilityCVE-2026-654597.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerabilityCVE-2026-963418.2 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1023887.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerabilityCVE-2026-963367.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1066117.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerabilityCVE-2026-963357.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerabilityCVE-2026-822205.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerabilityCVE-2026-665839.8 Critical
- wpmu dev forminatorWordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-281437.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerabilityCVE-2026-281118.8 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerabilityCVE-2026-578157.5 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-578147.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-560717.1 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerabilityCVE-2026-324095.3 Medium
- incsub forminatorCross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this...CVE-2024-456256.1 Medium
- incsub forminator, wpmudev broken link checker +1 moreForminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type...CVE-2024-288905.3 Medium
- incsub forminatorForminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is...CVE-2024-31077EPSS 30.4%7.2 High
- incsub forminatorForminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability...CVE-2024-318575.4 Medium
- incsub forminatorWordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-297777.1 High
- incsub forminatorForminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site ScriptingCVE-2023-51194.8 Medium
- incsub forminatorForminator < 1.24.4 - Reflected XSSCVE-2023-31346.1 Medium
- incsub forminatorForminator < 1.24.1 - Unauthenticated Race Condition on poll voteCVE-2023-20103.1 Low
- incsub forminatorWordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368217.1 High