Unknown Forminator Forms
6 known vulnerabilities in Unknown Forminator Forms, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-87071 CVSS 5.3 medium The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may supply, and does not…
- CVE-2026-87070 CVSS 5.3 medium The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before preferring…
- CVE-2026-87074 CVSS 3.7 low The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and…
- CVE-2026-87069 CVSS 3.1 low The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time…
- CVE-2026-87068 CVSS 6.6 medium The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a registration form is…
- CVE-2026-87067 CVSS 8.5 high The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value…