WordPress Plugin Vulnerabilities | Page 49 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-05-06

Title

Forminator < 1.53.0.1 - Subscriber+ Scheduled Form Submissions Export

Slug

Published

2026-05-06

Title

Forminator < 1.52 - Subscriber+ Module Management Actions

Slug

Published

2026-06-24

Title

Forminator < 1.53.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.0.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.1 - Unauthenticated Arbitrary File Read

Slug

Published

2026-08-03

Title

Forminator Forms < 1.56.1 - Unauthenticated Stored XSS

Slug

Published

2026-08-05

Title

Forminator Forms < 1.56.2 - Unauthenticated Stored XSS via Forged Upload Record in 'select-' Field

Slug

Published

2026-08-03

Title

Forminator Forms < 1.56.0.1 - Contributor+ Privilege Escalation

Slug

Published

2026-08-15

Title

Forminator Forms < 1.55.1 - Unauthenticated Draft Form Entry Disclosure via 'draft' Parameter

Slug

Published

2026-08-17

Title

Forminator Forms < 1.56.2 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

Slug

Published

2026-08-19

Title

Forminator Forms < 1.57.1 - Unauthenticated PHP Object Injection

Slug

Published

2026-08-20

Title

Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.0.1 - DOM-Based XSS via 'error_description' Parameter

Slug

Published

2026-08-20

Title

Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation

Slug

Published

2026-08-27

Title

Forminator Forms < 1.57.0.2 - Unauthenticated Stored XSS via Rich-Text Textarea Field

Slug

Published

2026-08-24

Title

Forminator Forms < 1.57.0.3 - Unauthenticated Stored XSS via Radio Field (Save and Continue Draft)

Slug

Published

2026-08-28

Title

Forminator Forms < 1.57.2 - Unauthenticated Payment Bypass

Slug

Published

2026-09-18

Title

Forminator Forms < 1.57.3 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter

Slug

Published

2026-09-21

Title

Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe

Slug

Published

2026-09-18

Title

Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection

Slug

Published

2026-09-21

Title

Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing

Slug

Published

2026-09-18

Title

Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import

Slug

Published

2026-09-21

Title

Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts

Slug

Published

2026-09-21

Title

Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link