WordPress Forminator Stored XSS via Radio Field (CVE-2026-18323)

Vulnerability Overview Vulnerability Name: Forminator Forms <= 1.57.0.2 - Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) CVE ID: CVE-2026-18323 CVSS Score: 7.2 (High) Publication Date: August 24, 2026 Last Updated: August 25, 2026 Researcher: daroo Affected Software Software Type: Plugin Software Name: Forminator Forms – Contact Form, Payment Form & Custom Form Builder Affected Versions: <= 1.57.0.2 Fixed Version: 1.57.0.3 Remediation Remediation Method: Update to version 1.57.0.3 or higher. Description The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin contains a stored cross-site scripting (XSS) vulnerability in versions 1.57.0.2 and earlier. This vulnerability is exploitable through the "Save and Continue Draft" feature's radio field. Due to insufficient input validation and output escaping, an attacker can inject arbitrary web scripts that execute when users visit the affected page. The vulnerability is exploitable because the "Save and Continue Draft" submission AJAX endpoint is registered as , allowing unauthenticated attackers to bypass radio field option membership validation and persist a crafted payload. This payload is automatically executed via the callback binding of the bundled Inputmask library when rendered on the submission management page. References plugins.trac.wordpress.org Share Options Facebook Twitter LinkedIn Email Additional Information Disclaimer: This record contains copyrighted material. Copyright Notice: - Copyright 2012-2026 Defiant Inc. - Copyright 1999-2026 The MITRE Corporation Contact Information Technical Support: 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT (excluding weekends and holidays). Response Time: 24/7 support for customers, with a 1-hour response time. Other Links Terms of Service Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information Social Media X Facebook Instagram YouTube Products and Support Products: - Wordfence Free - Wordfence Premium - Wordfence Care - Wordfence Response - Wordfence CLI - Wordfence Intelligence - Wordfence Central Support: - Documentation - Learning Center - Free Support - Premium Support News: - Blog - In The News - Vulnerability Advisories About: - About Wordfence - Affiliate Program - Employment - Contact - Security - CVE Request Form Subscribe for Updates Email Subscription: Enter your email address to subscribe to news and updates. Copyright Information © 2012-2026 Defiant Inc. All Rights Reserved Other Cherubic: A Cherubic logo is present at the bottom of the page. --- Note: POC code or exploit code is not included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Forminator Stored XSS via Radio Field (CVE-2026-18323)

More from this source