Input validation vulnerability in Forminator Forms – Contact Form, Payment Form & Custom Form Builder 1.38.2

A popular plugin for creating forms on WordPress websites called “Forminator Forms” has a security vulnerability. This means that unauthorized users with high level permissions can inject harmful web scripts into pages on the website, which can then be executed when someone visits that page. This only affects websites with multiple sites or with certain security settings disabled.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.