Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Forminator — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Forminator, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the Forminator product line, focusing on identified security weaknesses associated with this specific tool. It collects documented security flaws reported for Forminator over the period from its initial release through recent updates. Users can track the vendor's advisory history, understand the specific classes of weaknesses affecting the product, and review its vulnerability timeline. The collection includes details on each issue, such as severity ratings and affected versions. This aggregation allows security teams to monitor the risk landscape of Forminator without needing to search through individual database entries. It is designed for analysts who need a consolidated view of the product's security posture over time.

Vendor: WPMU DEV

CVE ID Title CVSS Severity Published
CVE-2026-82220 WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability CWE-294 5.3 Medium 2026-08-28
CVE-2026-66583 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-08-20
CVE-2026-28143 WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-06
CVE-2026-28111 WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability CWE-266 8.8 High 2026-08-06
CVE-2026-57815 WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability CWE-22 7.5 High 2026-07-13
CVE-2026-57814 WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-07-13
CVE-2026-56071 WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-25
CVE-2026-32409 WordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-03-13
CVE-2024-45625 WordPress plugin Forminator Forms 安全漏洞 6.1AI Medium AI 2024-09-09
CVE-2024-28890 WordPress plugin Forminator 安全漏洞 9.8 - 2024-04-23
CVE-2024-31077 WordPress plugin Forminator 安全漏洞 7.2 - 2024-04-23
CVE-2024-31857 WordPress plugin Forminator 安全漏洞 6.1 - 2024-04-23
CVE-2024-29777 WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-27
CVE-2023-5119 Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting 4.8AI Medium AI 2023-11-20
CVE-2023-3134 Forminator < 1.24.4 - Reflected XSS 6.1 - 2023-07-31
CVE-2023-2010 Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote 5.3 - 2023-07-04
CVE-2021-36821 WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability CWE-79 7.1 High 2023-03-16

All 17 known CVE vulnerabilities affecting Forminator with full Chinese analysis, references, and POCs where available.