Forminator vulnerabilities | LiveThreat CVE Feed

Product

Forminator

by WPMU DEV · last CVE Oct 12, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 9Medium 3Low 0

Severity

Exploitation

Watch

Add Forminator to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-45625	6.1	0%	Sep 9	Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1 Affected: prior to 1.34.1
CVE-2026-108486	5.3	0%	Oct 12	WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability Affected: through 1.58.0
CVE-2026-82220	5.3	0%	Aug 28	WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability Affected: through 1.57.1