Skip to content
OpenAdvisories

Product · WPMU DEV

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

37 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-2002 Public exploit

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.50.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all versions up to, and including, 1.50.2 due to insufficient input sanitization and outpu…

    WPMU DEV Forminator Forms – Contact Form, Payment Form & Custom Form Builder Web / CMS