Skip to content
OpenAdvisories

Product · WPMU DEV - Your All-in-One WordPress Platform

Forminator

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-57815

    WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1.55.0.2.

    WPMU DEV - Your All-in-One WordPress Platform Forminator
  • High 7.1
    CVE-2026-57814

    WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through <= 1.55.0.1.

    WPMU DEV - Your All-in-One WordPress Platform Forminator
  • High 7.1
    CVE-2024-29777

    WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator.This issue affects Forminator: from n/a through <= 1.29.0.

    WPMU DEV - Your All-in-One WordPress Platform Forminator