| CVE-2026-87070 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before…
|
5.3
Medium
|
Sep 23, 2026 |
| CVE-2026-87071 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may…
|
5.3
Medium
|
Sep 23, 2026 |
| CVE-2026-87074 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who…
|
3.7
Low
|
Sep 23, 2026 |
| CVE-2026-87069 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before…
|
3.1
Low
|
Sep 23, 2026 |
| CVE-2026-87067 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it…
|
8.5
High
|
Sep 20, 2026 |
| CVE-2026-87068 |
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a…
|
6.6
Medium
|
Sep 20, 2026 |
| CVE-2026-19220 |
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network…
|
3.7
Low
|
Aug 26, 2026 |
| CVE-2026-19222 |
The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies…
|
6.6
Medium
|
Aug 22, 2026 |
| CVE-2026-19221 |
The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network…
|
7.2
High
|
Aug 22, 2026 |
| CVE-2024-7052 |
The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could…
|
4.8
Medium
|
Feb 14, 2025 |