Skip to content
OpenAdvisories

Vendor

wpmudev

65 known vulnerabilities.

Products

Forminator Forms – Contact Form, Payment Form & Custom Form Builder 37 Hustle – Email Marketing, Lead Generation, Optins, Popups 8 Branda – White Label & Branding, Free Login Page Customizer 5 Broken Link Checker 5 SmartCrawl SEO checker, analyzer & optimizer 3 WPMU DEV Dashboard 2 Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN 2 Smush – Image Optimization, Compression, Lazy Load, WebP & CDN 1 Appointments 1 Defender Security – Malware Scanner, Login Security & Firewall 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-2002 Public exploit

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.50.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all versions up to, and including, 1.50.2 due to insufficient input sanitization and outpu…

    wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder Web / CMS