Known vulnerabilities in Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Best WordPress form builder plugin. Create contact forms, payment forms & order forms with 1000+ integrations.
57Reported vulnerabilities
9.8Highest CVSS score
1.57.0Latest version
600,000+Active installs
What to do now
Update Forminator Forms – Contact Form, Payment Form & Custom Form Builder to 1.57.0.2 or later.
57 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-31077 | Critical | 30.4% | 1.29.2 and earlier | 1.29.3 |
April 18, 2024 |
| CVE-2023-4596 | Critical | 14.3% | 1.24.6 and earlier | 1.25.0 |
August 30, 2023 |
| CVE-2025-6463 | High | 12.4% | 0 to 1.44.2 (inclusive) | 1.44.3 |
July 2, 2025 |
| CVE-2024-7389 | High | 0.7% | 0 to 1.29.1 (inclusive) 0 to 1.29.1 (inclusive) |
1.29.2 |
August 2, 2024 |
| CVE-2023-3134 | Medium | 4.1% | Before 1.24.4 | 1.24.4 |
July 31, 2023 |
| CVE-2026-15748 | Critical | 4.6% | 0 to 1.56.1 (inclusive) | 1.56.2 |
August 18, 2026 |
| CVE-2019-9568 | Medium | 1.6% | Before 1.6 | 1.6 |
March 4, 2019 |
| CVE-2019-9567 | Medium | 1.3% | Before 1.6 | 1.6 |
March 4, 2019 |
| CVE-2024-28890 | Critical | 0.7% | 1.28.1 and earlier | 1.29.0 |
April 18, 2024 |
| CVE-2026-28111 | High | 0.3% | 1.56.0 and earlier | 1.56.0.1 |
August 3, 2026 |
| CVE-2025-6464 | High | 0.5% | 0 to 1.44.2 (inclusive) | 1.44.3 |
July 2, 2025 |
| CVE-2023-5119 | Medium | 0.5% | Before 1.27.0 | 1.27.0 |
November 20, 2023 |
| CVE-2021-24700 | Medium | 0.6% | Before 1.15.4 | 1.15.4 |
November 23, 2021 |
| CVE-2021-4417 | Medium | 0.4% | Before 1.13.5 | 1.13.5 |
July 12, 2023 |
| CVE-2026-66583 | High | 0.4% | 1.57.0 and earlier | 1.57.1 |
August 19, 2026 |
| CVE-2026-57815 | High | 0.5% | 0 to 1.55.0.2 (inclusive) | 1.55.1 |
July 13, 2026 |
| CVE-2026-5192 | High | 0.8% | 0 to 1.52.1 (inclusive) | 1.52.2 |
May 5, 2026 |
| CVE-2024-10402 | High | 0.5% | 1.35.1 and earlier | 1.36.0 |
October 25, 2024 |
| CVE-2026-18324 | High | 0.3% | 0 to 1.57.0.1 (inclusive) | 1.57.0.2 |
August 28, 2026 |
| CVE-2026-19220 | High | 0.2% | Before 1.57.1 | 1.57.1 |
August 28, 2026 |
| CVE-2026-19221 | High | 0.5% | Before 1.57.0.5 | 1.57.0.5 |
August 27, 2026 |
| CVE-2026-18323 | High | 0.3% | 0 to 1.57.0.2 (inclusive) | 1.57.0.3 |
August 25, 2026 |
| CVE-2026-18325 | High | 0.3% | 0 to 1.56.1 (inclusive) | 1.56.2 |
August 6, 2026 |
| CVE-2026-56071 | High | 0.3% | 1.53.1 and earlier | 1.53.2 |
June 24, 2026 |
| CVE-2024-1794 | High | 0.5% | 1.29.0 and earlier | 1.29.1 |
March 29, 2024 |
| CVE-2021-36821 | High | 0.4% | Before 1.14.12 | 1.14.12 |
July 14, 2021 |
| CVE-2026-18328 | High | 0.2% | 0 to 1.57.0 (inclusive) | 1.57.0.1 |
August 25, 2026 |
| CVE-2026-28143 | High | 0.2% | 1.56.0 and earlier | 1.56.1 |
August 3, 2026 |
| CVE-2026-57814 | High | 0.3% | 0 to 1.55.0.1 (inclusive) | 1.55.0.2 |
July 13, 2026 |
| CVE-2023-2010 | Low | 0.4% | Before 1.24.1 | 1.24.1 |
July 4, 2023 |
| CVE-2026-6214 | Medium | 0.4% | 0 to 1.53.0 (inclusive) | 1.53.0.1 |
May 7, 2026 |
| CVE-2025-5341 | Medium | 0.3% | 0 to 1.44.1 (inclusive) | 1.44.2 |
June 5, 2025 |
| CVE-2026-19222 | Medium | 0.3% | Before 1.57.0.7 | 1.57.0.7 |
August 28, 2026 |
| CVE-2024-31857 | Medium | 0.6% | 1.15.2 and earlier | 1.15.4 |
April 18, 2024 |
| CVE-2025-0470 | Medium | 0.3% | 0 to 1.38.2 (inclusive) | 1.38.3 |
January 31, 2025 |
| CVE-2024-45625 | Medium | 0.4% | 1.34.0 and earlier | 1.34.1 |
September 9, 2024 |
| CVE-2024-29777 | Medium | 0.4% | 0 to 1.29.0 (inclusive) | 1.29.1 |
March 27, 2024 |
| CVE-2025-3487 | Medium | 0.3% | 0 to 1.42.0 (inclusive) | 1.42.1 |
April 17, 2025 |
| CVE-2024-3053 | Medium | 0.4% | 0 to 1.29.2 (inclusive) | 1.29.3 |
April 9, 2024 |
| CVE-2026-82220 | Medium | 0.2% | 1.57.1 and earlier | 1.57.2 |
August 28, 2026 |
| CVE-2026-12998 | Medium | 0.3% | 0 to 1.55.0.2 (inclusive) | 1.55.1 |
August 16, 2026 |
| CVE-2026-6222 | Medium | 0.4% | 0 to 1.51.1 (inclusive) | 1.52 |
May 7, 2026 |
| CVE-2026-2729 | Medium | 0.4% | 0 to 1.52.0 (inclusive) | 1.52.1 |
May 5, 2026 |
| CVE-2026-32409 | Medium | 0.2% | 0 to 1.50.2 (inclusive) | 1.50.3 |
March 13, 2026 |
| CVE-2025-14782 | Medium | 0.3% | 0 to 1.49.1 (inclusive) | 1.49.2 |
January 9, 2026 |
| CVE-2025-3479 | Medium | 0.2% | 0 to 1.42.0 (inclusive) | 1.42.1 |
April 17, 2025 |
| CVE-2025-0469 | Medium | 0.2% | 1.39.2 to 1.39.2 (inclusive) | 1.39.3 |
February 27, 2025 |
| CVE-2024-9700 | Medium | 0.4% | 0 to 1.36.0 (inclusive) 0 to 1.36.0 (inclusive) |
1.36.1 |
October 31, 2024 |
| CVE-2023-6133 | Medium | 0.9% | 1.27.0 and earlier | 1.28.0 |
November 15, 2023 |
| CVE-2025-7638 | Medium | 0.3% | 0 to 1.45.0 (inclusive) | 1.45.1 |
July 18, 2025 |
| CVE-2024-7052 | Medium | 0.3% | 1.38.2 and earlier | 1.38.3 |
January 24, 2025 |
| CVE-2026-2002 | Medium | 0.2% | 1.50.2 and earlier | 1.50.3 |
February 16, 2026 |
| CVE-2024-9352 | Medium | 0.2% | 0 to 1.35.1 (inclusive) | 1.36.0 |
October 17, 2024 |
| CVE-2024-9351 | Medium | 0.2% | 0 to 1.35.1 (inclusive) | 1.36.0 |
October 17, 2024 |
| WF-2ef15cb1-b320-42d9-a2fd-afff2ec8a93b | Medium | — | 1.22.1 and earlier | 1.23.3 |
April 12, 2023 |
| WF-718e54f5-f040-42d6-958d-255d905615d5 | Medium | — | 1.22.1 and earlier | 1.23.3 |
April 12, 2023 |
| WF-d0cb4434-94c5-42a9-bd86-869058dcbf67 | Medium | — | 1.22.1 and earlier | 1.23.3 |
April 12, 2023 |