#Forminator
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-123164
📊 n/a
🏢 Unknown

📝 The Forminator Forms WordPress plugin before 1.58.4 does not verify that a Stripe Checkout payment has completed before returning a pending submission's a...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123164

#cybersecurity #infosec #cve #euvd
November 11, 2026 at 7:05 AM
euvd-bot.bsky.social
🚨 EUVD-2026-123163
📊 n/a
🏢 Unknown

📝 The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form's configured payment gateway is unavailable, a...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123163

#cybersecurity #infosec #cve #euvd
November 11, 2026 at 7:05 AM
euvd-bot.bsky.social
🚨 EUVD-2026-118241
📊 6.5/10
🏢 WPMU DEV

📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS....

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118241

#cybersecurity #infosec #cve #euvd
November 6, 2026 at 2:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-116086
📊 5.3/10
🏢 WPMU DEV

📝 Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116086

#cybersecurity #infosec #cve #euvd
November 3, 2026 at 6:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-116085
📊 4.3/10
🏢 WPMU DEV

📝 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator forminator allows Code Injection.Thi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116085

#cybersecurity #infosec #cve #euvd
November 3, 2026 at 6:04 PM
thehackerwire.bsky.social
🟠 CVE-2026-97638 - High (7.5)

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...

https://www.thehackerwire.com/vulnerability/CVE-2026-97638/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-97638 - High
November 2, 2026 at 12:03 AM
hugovalters.bsky.social
CVE-2026-87067 Forminator WordPress plugin before 1.57.2.1: unsafe deserialization via XML-RPC enables arbitrary file write and RCE. CVSS 8.5, patch status unpatched. Update to 1.57.2.1 now. #CVE #WordPress #infosec https://www.valtersit.com/cve/CVE-2026-87067/
October 31, 2026 at 7:40 AM
hugovalters.bsky.social
CVE-2026-87068: Forminator WordPress plugin before 1.57.2.1 lets quiz importers publish a form granting admin role to any submitter (CVSS 6.6, unpatched). Update now. #CVE #WordPress #infosec https://www.valtersit.com/cve/CVE-2026-87068/
October 31, 2026 at 3:50 AM
euvd-bot.bsky.social
🚨 EUVD-2026-114220
📊 7.5/10
🏢 wpmudev

📝 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ve...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114220

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 7:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-113708
📊 6.5/10
🏢 wpmudev

📝 The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1.55.0.2. This is due to the plug...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113708

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 5:03 AM
throwable.bsky.social
📦 mralaminahamed/forminator-stubs v1.58.3

Forminator function and class declaration stubs for static analysis.

🔗 https://github.com/mralaminahamed/phpstan-forminator-stubs
October 28, 2026 at 10:16 AM
firstnetworks.bsky.social
⚠️ Forminator-Plugin (600.000+ WordPress-Sites): Bis v1.58.1 ohne Login angreifbar. 62 % noch ungepacht. Update auf 1.58.2 jetzt! #WordPress #Sicherheit

🤖 KI-generiert
October 20, 2026 at 8:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-102637
📊 6.5/10
🏢 wpmudev

📝 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102637

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 6:02 AM
euvd-bot.bsky.social
🚨 EUVD-2026-97722
📊 5.3/10
🏢 WPMU DEV

📝 Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97722

#cybersecurity #infosec #cve #euvd
October 12, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-96405
📊 8.2/10
🏢 WPMU DEV

📝 Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a throug...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96405

#cybersecurity #infosec #cve #euvd
October 10, 2026 at 8:02 PM
thehackerwire.bsky.social
🟠 CVE-2026-96341 - High (8.2)

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege E...

https://www.thehackerwire.com/vulnerability/CVE-2026-96341/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-96341 - High
October 10, 2026 at 7:31 PM
euvd-bot.bsky.social
🚨 EUVD-2026-96513
📊 7.5/10
🏢 WPMU DEV

📝 Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96513

#cybersecurity #infosec #cve #euvd
October 10, 2026 at 9:07 PM
euvd-bot.bsky.social
🚨 EUVD-2026-96321
📊 7.1/10
🏢 WPMU DEV

📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.Th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96321

#cybersecurity #infosec #cve #euvd
October 10, 2026 at 3:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-95589
📊 7.5/10
🏢 WPMU DEV

📝 Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a throug...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95589

#cybersecurity #infosec #cve #euvd
October 9, 2026 at 11:05 AM
euvd-bot.bsky.social
🚨 EUVD-2026-94955
📊 7.1/10
🏢 WPMU DEV

📝 Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94955

#cybersecurity #infosec #cve #euvd
October 8, 2026 at 2:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-94525
📊 7.5/10
🏢 WPMU DEV

📝 Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects F...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94525

#cybersecurity #infosec #cve #euvd
October 7, 2026 at 8:04 PM
thehackerwire.bsky.social
🟠 CVE-2026-96335 - High (7.5)

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configur...

https://www.thehackerwire.com/vulnerability/CVE-2026-96335/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-96335 - High
October 7, 2026 at 6:31 PM
euvd-bot.bsky.social
🚨 EUVD-2026-90565
📊 7.2/10
🏢 wpmudev

📝 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Te...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90565

#cybersecurity #infosec #cve #euvd
October 1, 2026 at 10:02 AM
euvd-bot.bsky.social
🚨 EUVD-2026-90595
📊 7.2/10
🏢 wpmudev

📝 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postdata-1[...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90595

#cybersecurity #infosec #cve #euvd
October 1, 2026 at 10:01 AM