FF
Product
Forminator Forms
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 9Low 0
Watch
Add Forminator Forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10402 | 8.8 | Oct 26 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation Affected: before 1.36.0 |
| CVE-2025-5341 | 6.4 | Jun 5 | Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters Affected: before 1.44.2 |
| CVE-2025-0470 | 6.1 | Jan 31 | Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter Affected: before 1.38.3 |
| CVE-2025-3487 | 5.4 | Apr 17 | Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit' Affected: before 1.42.1 |
| CVE-2025-0469 | 5.4 | Feb 27 | Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 1.39.3 |
| CVE-2025-3479 | 5.3 | Apr 17 | Forminator <= 1.42.0 - Order Replay Vulnerability Affected: before 1.42.1 |
| CVE-2024-9700 | 5.3 | Oct 31 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation Affected: before 1.36.1 |
| CVE-2024-7052 | 4.8 | Feb 14 | Forminator < 1.38.3 - Admin+ Stored XSS Affected: before 1.38.3 |
| CVE-2024-9351 | 4.3 | Oct 17 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation Affected: before 1.36.0 |
| CVE-2024-9352 | 4.3 | Oct 17 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation Affected: before 1.36.0 |
Showing 10