GCVE - cpe:2.3:a:wpmu_dev:forminator:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wpmu_dev:forminator:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wpmu Dev (`be01ef96-431f-5f3d-965c-62689ba428d9`)
Product	Forminator (`c4a4d619-c08f-5d5d-89e1-8d87741be147`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-56071`	vulnerable	2026-07-29 01:00:28.855437	WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. Published: 2026-06-25T13:12:44.160Z Updated: 2026-06-25T14:52:38.046Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/forminator/vulnerability/wordpress-forminator-plugin-1-53-1-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45625`	vulnerable	2026-06-08 06:48:08.749638	Details available Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator. Published: 2024-09-09T04:44:54.663Z Updated: 2025-03-26T20:02:44.348Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/forminator/ https://plugins.trac.wordpress.org/changeset?new=3135507%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js&old=3111152%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js https://wpmudev.com/ https://jvn.jp/en/jp/JVN65724976/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31857`	vulnerable	2026-06-08 06:35:32.174556	Details available Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user's web browser. Published: 2024-04-23T04:46:50.478Z Updated: 2024-08-02T01:59:49.388Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/forminator/ https://wpmudev.com/ https://jvn.jp/en/jp/JVN50132400/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31077`	vulnerable	2026-06-08 06:35:30.893777	Details available Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) condition. Published: 2024-04-23T04:47:03.136Z Updated: 2024-08-02T01:46:04.186Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/forminator/ https://wpmudev.com/ https://jvn.jp/en/jp/JVN50132400/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28890`	vulnerable	2026-06-08 06:33:27.836393	Details available Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition. Published: 2024-04-23T04:56:24.799Z Updated: 2024-11-18T21:11:06.673Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/forminator/ https://wpmudev.com/ https://jvn.jp/en/jp/JVN50132400/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36821`	vulnerable	2026-06-08 05:32:52.558257	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.