Login Request a demo
FO
Product
Forminator
by WPMU DEV · last CVE Oct 12, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 1High 10Medium 6Low 0
Severity
All severities17Critical1High10Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Forminator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45625
6.1
0%
Sep 9
Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1
Affected: prior to 1.34.1
CVE-2021-36821
6.1
0%
Mar 16
WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability
Affected: through 1.14.11
CVE-2024-31857
5.4
1%
Apr 23
Forminator prior to 1.15.4 contains a cross-site scripting vulnerability
Affected: prior to 1.15.4
CVE-2026-108486
5.3
0%
Oct 12
WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability
Affected: through 1.58.0
CVE-2026-82220
5.3
0%
Aug 28
WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability
Affected: through 1.57.1
CVE-2024-28890
5.3
1%
Apr 23
Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability
Affected: prior to 1.29.0
Showing 6