Wpmudev Forminator Forms vulnerabilities

• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters CVE-2025-5341 6.4 MediumJune 5, 2025
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator <= 1.42.0 - Order Replay Vulnerability CVE-2025-3479 5.3 MediumApril 17, 2025
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit' CVE-2025-3487 6.4 MediumApril 17, 2025
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-0469 6.4 MediumFebruary 27, 2025
• unknown forminator forms Forminator < 1.38.3 - Admin+ Stored XSS CVE-2024-7052 4.8 MediumFebruary 14, 2025
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter CVE-2025-0470 6.1 MediumJanuary 31, 2025
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation CVE-2024-9700 5.3 MediumOctober 31, 2024
• incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +2 more Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation CVE-2024-10402 7.5 HighOctober 26, 2024
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation CVE-2024-9351 4.3 MediumOctober 17, 2024
• wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 more Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation CVE-2024-9352 4.3 MediumOctober 17, 2024