Unknown Forminator Forms vulnerabilities
12 published CVEs name Unknown Forminator Forms among the affected products.
- 12Published CVEs12 of them scored
- 11Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111597
Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe Checkout Session
Unknown · Forminator Forms
Medium5.3 - CVE-2026-111579
Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable
Unknown · Forminator Forms
High8.1 - CVE-2026-87071
Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts
Unknown · Forminator Forms
Medium5.3 - CVE-2026-87070
Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing
Unknown · Forminator Forms
Medium5.3 - CVE-2026-87074
Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link
Unknown · Forminator Forms
Low3.7 - CVE-2026-87069
Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe
Unknown · Forminator Forms
Low3.1 - CVE-2026-87068
Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import
Unknown · Forminator Forms
Medium6.6 - CVE-2026-87067
Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection
Unknown · Forminator Forms
High8.5 - CVE-2026-19220
Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation
Unknown · Forminator Forms
Low3.7 - CVE-2026-19222
Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
Unknown · Forminator Forms
Medium6.6