CVE · High
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-56071 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.53.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.53.2 | 1.53.2 | 2026-06-24 | — |
The Forminator Forms plugin for WordPress contains a security flaw in versions prior to or equal to 1.53.1, allowing malicious code injection through unsanitized input. This vulnerability enables unauthorized parties to embed executable scripts on affected sites, which will run when users visit the compromised pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.