CVE-2026-82220— WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability
Quick assessment
Affected
WPMU DEV Forminator
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Forminator 1.57.1 版本及更早版本中存在一个“未认证的其他类型漏洞”。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1529 · System Shutdown/RebootAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| WPMU DEV | Forminator | n/a≤ 1.57.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82220
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用捕获-重放进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WPMU DEV | Forminator | n/a ~ 1.57.1 | - |
|
II. Public POCs for CVE-2026-82220
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82220
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-82220 (1)
IV. Related Vulnerabilities
Same product: Forminator
-
CVE-2026-66583
WordPress Forminator plugin <= 1.57.0 - PHP Object Injection -
CVE-2026-28143
WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting -
CVE-2026-28111
WordPress Forminator plugin <= 1.56.0 - Privilege Escalation -
CVE-2026-57815
WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Dow -
CVE-2026-57814
WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripti
Same vendor: WPMU DEV
-
CVE-2026-81285
WordPress Smush Image Compression and Optimization plugin <= -
CVE-2026-66583
WordPress Forminator plugin <= 1.57.0 - PHP Object Injection -
CVE-2026-28143
WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting -
CVE-2026-28111
WordPress Forminator plugin <= 1.56.0 - Privilege Escalation -
CVE-2026-56071
WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting
Same weakness: CWE-294
-
CVE-2026-13734
Zephyr WireGuard mutates peer state before anti-replay check -
CVE-2026-41707
Spring Security DPoPProofJwtDecoderFactory vulnerable to DPo -
CVE-2026-65905
Apache Tomcat: Limited replay attack possible with DIGEST au -
CVE-2026-53424
Missing one-time-use enforcement in Samly allows replay of S -
CVE-2026-67581
On-chain transfer proof is not single-use in mpp EVM payment
V. Comments for CVE-2026-82220
No comments yet