Known Vulnerabilities for Forminator by Incsub
Listed below are 10 of the newest known vulnerabilities associated with "Forminator" by "Incsub".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32409 json | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting ... | Not Provided | 2026-03-13 | 2026-04-01 |
| CVE-2025-22752 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WesternDeal GSheetConne... | Not Provided | 2025-01-15 | 2026-04-23 |
| CVE-2024-29777 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-... | Not Provided | 2024-03-27 | 2026-04-23 |
| CVE-2024-3053 json | The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site S... | Not Provided | 2024-04-09 | 2026-04-08 |
| CVE-2024-1794 json | The Forminator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. 3gpp file) in all... | Not Provided | 2024-04-09 | 2026-04-08 |
| CVE-2023-6133 json | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient blacklisting on the 'forminat... | Not Provided | 2023-11-15 | 2026-04-08 |
| CVE-2023-5119 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | Not Provided | 2023-11-20 | 2023-11-20 |
| CVE-2023-4596 json | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a fil... | Not Provided | 2023-08-30 | 2026-04-08 |
| CVE-2023-3134 json | The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields tha... | 6.1 - MEDIUM | 2023-07-31 | 2023-11-07 |
| CVE-2023-2010 json | The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and... | 3.1 - LOW | 2023-07-04 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Incsub | Forminator | 1.7.0.1 | |||
| Application | Incsub | Forminator | 1.7.0 | |||
| Application | Incsub | Forminator | 1.6.3 | |||
| Application | Incsub | Forminator | 1.6.2 | |||
| Application | Incsub | Forminator | 1.6.1 | |||
| Application | Incsub | Forminator | 1.6.0.3 | |||
| Application | Incsub | Forminator | 1.6.0.2 | |||
| Application | Incsub | Forminator | 1.6.0.1 | |||
| Application | Incsub | Forminator | 1.6 | |||
| Application | Incsub | Forminator | 1.5.4 | |||
| Application | Incsub | Forminator | 1.5.3.1 | |||
| Application | Incsub | Forminator | 1.5.3 | |||
| Application | Incsub | Forminator | 1.5.2 | |||
| Application | Incsub | Forminator | 1.5.1 | |||
| Application | Incsub | Forminator | 1.5.0 | |||
| Application | Incsub | Forminator | 1.4.0 | |||
| Application | Incsub | Forminator | 1.3.0 | |||
| Application | Incsub | Forminator | 1.2.1 | |||
| Application | Incsub | Forminator | 1.2.0 | |||
| Application | Incsub | Forminator | 1.1.0 |