PatchTheCVEforminator forms vulnerabilities and fixes
Recent CVEs affecting forminator forms, with upgrade or downgrade steps. 10 tracked.
Also searched as: forminatorforms.
forminator forms has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-06-05. Highest priority: CVE-2024-10402 (score 37/100).
- CVE-2025-5341 MEDIUM 6.4 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2025-3487 MEDIUM 6.4 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2025-3479 MEDIUM 5.3 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2025-0470 MEDIUM 6.1 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2025-0469 MEDIUM 6.4 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2024-9700 MEDIUM 5.3 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2024-9352 MEDIUM 4.3 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2024-9351 MEDIUM 4.3 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
- CVE-2024-7052 MEDIUM 4.8 UPGRADE The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which
- CVE-2024-10402 HIGH 7.5 UPGRADE The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to
FAQ
How do I fix forminator forms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is forminator forms being exploited right now?
None of the tracked forminator forms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which forminator forms CVE should I patch first?
CVE-2024-10402 currently ranks highest (37/100): The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to .