CVE · High
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-28143 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.56.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.56.1 | 1.56.1 | 2026-08-03 | — |
A vulnerability exists in earlier versions of the Forminator plugin, specifically those prior to version 1.57, where an attacker can inject malicious scripts without requiring user authentication, potentially leading to unauthorized actions on a website. This issue is categorized as a cross-site scripting (XSS) flaw.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.