Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Unknown

Unknown Forminator Forms vulnerabilities

12 published CVEs name Unknown Forminator Forms among the affected products.

Newest CVEs

  • CVE-2026-111597

    Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message via Unpaid Stripe Checkout Session

    Unknown · Forminator Forms

    Medium5.3
  • CVE-2026-111579

    Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable

    Unknown · Forminator Forms

    High8.1
  • CVE-2026-87071

    Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts

    Unknown · Forminator Forms

    Medium5.3
  • CVE-2026-87070

    Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing

    Unknown · Forminator Forms

    Medium5.3
  • CVE-2026-87074

    Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link

    Unknown · Forminator Forms

    Low3.7
  • CVE-2026-87069

    Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe

    Unknown · Forminator Forms

    Low3.1
  • CVE-2026-87068

    Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import

    Unknown · Forminator Forms

    Medium6.6
  • CVE-2026-87067

    Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection

    Unknown · Forminator Forms

    High8.5
  • CVE-2026-19220

    Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation

    Unknown · Forminator Forms

    Low3.7
  • CVE-2026-19222

    Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

    Unknown · Forminator Forms

    Medium6.6