Description
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPMU DEV | Forminator | ≤ 1.53.1 | — |
High · 7.1
CVE-2026-56071
EUVD-2026-39384GHSA-h3hf-xcf9-4v9v
WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability
Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack