WordPress Plugin Vulnerabilities | Page 45 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-01-08

Title

Forminator Forms < 1.49.2 - Forminator User+ CSV Export

Slug

Published

2026-02-16

Title

Forminator Forms < 1.50.3 - Admin+ Stored XSS

Slug

Published

2026-02-22

Title

Forminator < 1.50.3 - Missing Authorization

Slug

Published

2026-05-04

Title

Forminator < 1.52.1 - Unauthenticated Missing Authorization to Payment Bypass

Slug

Published

2026-05-04

Title

Forminator < 1.52.2 - Unauthenticated Arbitrary File Read via 'upload-1[file][file_path]' Parameter

Slug

Published

2026-05-06

Title

Forminator < 1.53.0.1 - Subscriber+ Scheduled Form Submissions Export

Slug

Published

2026-05-06

Title

Forminator < 1.52 - Subscriber+ Module Management Actions

Slug

Published

2026-06-24

Title

Forminator < 1.53.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.0.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.1 - Unauthenticated Arbitrary File Read

Slug

Published

2026-08-03

Title

Forminator Forms < 1.56.1 - Unauthenticated Stored XSS

Slug

Published

2026-08-05

Title

Forminator Forms < 1.56.2 - Unauthenticated Stored XSS via Forged Upload Record in 'select-' Field

Slug

Published

2026-08-03

Title

Forminator Forms < 1.56.0.1 - Contributor+ Privilege Escalation

Slug

Published

2026-08-15

Title

Forminator Forms < 1.55.1 - Unauthenticated Draft Form Entry Disclosure via 'draft' Parameter

Slug

Published

2026-08-17

Title

Forminator Forms < 1.56.2 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

Slug

Published

2026-08-19

Title

Forminator Forms < 1.57.1 - Unauthenticated PHP Object Injection

Slug

Published

2026-08-20

Title

Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.0.1 - DOM-Based XSS via 'error_description' Parameter

Slug

Published

2026-08-20

Title

Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation

Slug

Published

2026-08-27

Title

Forminator Forms < 1.57.0.2 - Unauthenticated Stored XSS via Rich-Text Textarea Field

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.0.3 - Unauthenticated Stored XSS via Radio Field (Save and Continue Draft)

Slug

Published

2026-08-28

Title

Forminator Forms < 1.57.2 - Unauthenticated Payment Bypass

Slug

Published

2026-07-05

Title

FormLayer < 1.0.7 - Unauthenticated Information Exposure

Slug

Published

2026-08-31

Title

FormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission Response