CVE

CVE-2025-6464 — Forminator Forms < 1.44.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-6464 Forminator Forms < 1.44.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion Unknown < 1.44.3 1.44.3

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.