Product by WPMU DEV
Forminator Forms
10 known vulnerabilities in Forminator Forms (WPMU DEV), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-10402 | WPMU DEV Forminator Forms: Missing Authorization | 7.5 | |
| Medium | CVE-2025-5341 | WPMU DEV Forminator Forms: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-3487 | Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit' | 6.4 | |
| Medium | CVE-2025-0470 | Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter | 6.1 | |
| Medium | CVE-2025-0469 | Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2024-9700 | WPMU DEV Forminator Forms: Authorization Bypass Through User-Controlled Key | 5.3 | |
| Medium | CVE-2024-7052 | Forminator < 1.38.3 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2025-3479 | Forminator <= 1.42.0 - Order Replay Vulnerability | 5.3 | |
| Medium | CVE-2024-9351 | WPMU DEV Forminator Forms: Cross-Site Request Forgery (CSRF) | 4.3 | |
| Medium | CVE-2024-9352 | WPMU DEV Forminator Forms: Cross-Site Request Forgery (CSRF) | 4.3 |