Forminator vulnerabilities

2 known vulnerabilities in Forminator from WPMU DEV - Your All-in-One WordPress Platform. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Forminator: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-57815Jul 13, 2026WPMU DEV - Your All-in-One WordPress Platform

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1.55.0.2.

• 7.1 High severity

  Forminator: Improper Neutralization of Input During Web Page Generation

  CVE-2026-57814Jul 13, 2026WPMU DEV - Your All-in-One WordPress Platform

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through <= 1.55.0.1.