Forminator Forms
Wpmudev · 10 CVEs
Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Paramete…
Jun 5, 2025
Forminator <= 1.42.0 - Order Replay Vulnerability
Apr 17, 2025
Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit'
Apr 17, 2025
Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Feb 27, 2025
Forminator < 1.38.3 - Admin+ Stored XSS
Feb 14, 2025
Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter
Jan 31, 2025
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Sub…
Oct 31, 2024
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated…
Oct 26, 2024
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Qui…
Oct 17, 2024
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Cus…
Oct 17, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-5341 | Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters | MEDIUM | 0.28% | Jun 5, 2025 |
| CVE-2025-3479 | Forminator <= 1.42.0 - Order Replay Vulnerability | MEDIUM | 0.21% | Apr 17, 2025 |
| CVE-2025-3487 | Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit' | MEDIUM | 0.29% | Apr 17, 2025 |
| CVE-2025-0469 | Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.25% | Feb 27, 2025 |
| CVE-2024-7052 | Forminator < 1.38.3 - Admin+ Stored XSS | MEDIUM | 0.33% | Feb 14, 2025 |
| CVE-2025-0470 | Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter | MEDIUM | 0.32% | Jan 31, 2025 |
| CVE-2024-9700 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation | MEDIUM | 0.39% | Oct 31, 2024 |
| CVE-2024-10402 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation | HIGH | 0.51% | Oct 26, 2024 |
| CVE-2024-9351 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation | MEDIUM | 0.23% | Oct 17, 2024 |
| CVE-2024-9352 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation | MEDIUM | 0.23% | Oct 17, 2024 |
Showing 1 to 10 of 10 CVEs