Forminator Forms — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

August 18, 2026

Last Seen

August 18, 2026

Related Threat Clusters

Critical Vulnerabilities in WordPress Plugins Expose 600,000 Sites to Attacks
IT researchers have identified critical vulnerabilities in the Forminator Forms and Royal Elementor Addons WordPress plugins. The Forminator Forms plugin, used in over 600,000 installations, has a flaw (CVE-2026-15748)…

2 articles · Updated August 18, 2026

Recent Intelligence Reports

Critical WordPress Plugin Vulnerability Exposes 600,000 Sites to File Upload Attacks — Cybersecuritynews · August 18, 2026
WordPress plugin Forminator Forms: Critical vulnerability allows code smuggling — Heise.De · August 18, 2026

Related Entities

Zero-day Exploit CVE-2026-15748 CVE-2026-17123 CVE-2026-19217 Cwe-434 - Unrestricted Upload Of File With Dangerous Type Cwe-79 - Cross-site Scripting (xss) Cwe-918 - Server-Side Request Forgery (ssrf) T1190 - Exploit Public-Facing Application Royal Elementor Addons WordPress XSS