Known vulnerabilities in the Forminator plugin

• Forminator - Security Vulnerability (CVE-2026-92144) HIGH 2026-10-01
• Forminator - Security Vulnerability (CVE-2026-85235) HIGH 2026-10-01
• Forminator - Security Vulnerability (CVE-2026-92229) CRITICAL 2026-09-19
• Forminator - Security Vulnerability (CVE-2026-82220) MEDIUM 2026-08-28
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-18324) HIGH 2026-08-28
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-18328) HIGH 2026-08-25
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-18323) HIGH 2026-08-25
• Forminator - PHP Object Injection (CVE-2026-66583) CRITICAL 2026-08-20
• Forminator - Remote Code Execution (CVE-2026-15748) CRITICAL 2026-08-18
• Forminator - Security Vulnerability (CVE-2026-12998) MEDIUM 2026-08-16
• Forminator - Privilege Escalation (CVE-2026-28111) HIGH 2026-08-06
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-28143) HIGH 2026-08-06
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-18325) HIGH 2026-08-06
• Forminator - Path Traversal (CVE-2026-57815) HIGH 2026-07-13
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-57814) HIGH 2026-07-13
• Forminator - Cross-Site Scripting (XSS) (CVE-2026-56071) HIGH 2026-06-25
• Forminator - Broken Access Control (CVE-2026-6214) MEDIUM 2026-05-07
• Forminator - Broken Access Control (CVE-2026-6222) MEDIUM 2026-05-07
• Forminator - Arbitrary File Upload (CVE-2026-5192) HIGH 2026-05-05
• Forminator - Broken Access Control (CVE-2026-2729) MEDIUM 2026-05-05
• Forminator - Broken Access Control (CVE-2026-32409) MEDIUM 2026-03-13
• Forminator - Broken Access Control (CVE-2025-14782) MEDIUM 2026-01-09
• Forminator - SQL Injection (CVE-2025-7638) MEDIUM 2025-07-18
• Forminator - PHP Object Injection (CVE-2025-6464) HIGH 2025-07-02
• Forminator - Remote Code Execution (CVE-2025-6463) HIGH 2025-07-02
• Forminator - Cross-Site Scripting (XSS) (CVE-2025-5341) MEDIUM 2025-06-05
• Forminator - Cross-Site Scripting (XSS) (CVE-2025-3487) MEDIUM 2025-04-17
• Forminator - Improper Input Validation (CVE-2025-3479) MEDIUM 2025-04-17
• Forminator - Cross-Site Scripting (XSS) (CVE-2025-0469) MEDIUM 2025-02-27
• Forminator - Cross-Site Scripting (XSS) (CVE-2025-0470) MEDIUM 2025-01-31

Browse the full threat database