Product

Forminator Forms (<= 1.57.2)

1 brief RSS

Stored Cross-Site Scripting in Forminator Forms WordPress Plugin

The Forminator Forms plugin for WordPress is vulnerable to Stored XSS via the 'postdata-1[post-custom]' parameter in versions 1.57.2 and below, allowing unauthenticated attackers to execute arbitrary scripts.

Forminator Forms web-application-vulnerability stored-xss wordpress cve-2026-92144

1r 1t 1c 1w ago