| CVE-2026-87070 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before…
|
5.3
Moyenne
|
23 sept. 2026 |
| CVE-2026-87071 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may…
|
5.3
Moyenne
|
23 sept. 2026 |
| CVE-2026-87074 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who…
|
3.7
Faible
|
23 sept. 2026 |
| CVE-2026-87069 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before…
|
3.1
Faible
|
23 sept. 2026 |
| CVE-2026-87067 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it…
|
8.5
Élevée
|
20 sept. 2026 |
| CVE-2026-87068 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a…
|
6.6
Moyenne
|
20 sept. 2026 |
| CVE-2026-19220 |
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network…
|
3.7
Faible
|
26 août 2026 |
| CVE-2026-19222 |
The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies…
|
6.6
Moyenne
|
22 août 2026 |
| CVE-2026-19221 |
The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network…
|
7.2
Élevée
|
22 août 2026 |
| CVE-2024-7052 |
The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could…
|
4.8
Moyenne
|
14 févr. 2025 |