How many WPMU DEV forminator forms CVEs are in CISA KEV?

None of WPMU DEV forminator forms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for WPMU DEV forminator forms vulnerabilities?

Yes — 1 of WPMU DEV forminator forms's CVEs have a known public exploit.

Which versions of WPMU DEV forminator forms are affected?

14 distinct WPMU DEV forminator forms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WPMU DEV forminator forms CVEs?

WPMU DEV forminator forms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-354 (Improper Validation of Integrity Check Value), CWE-639 (Authorization Bypass Through User-Controlled Key).

What is the average severity of WPMU DEV forminator forms CVEs?

The average CVSS base score across WPMU DEV forminator forms's scored CVEs is 5.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WPMU DEV

10 CVEs

WPMU DEV forminator forms Vulnerabilities

Name: WPMU DEV forminator forms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for forminator forms by WPMU DEV.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

5.8

Avg CVSS

2024–2025

Last updated June 5, 2025

Overview

WPMU DEV forminator forms has 10 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WPMU DEV forminator forms, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WPMU DEV forminator forms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium9

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WPMU DEV forminator forms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of WPMU DEV forminator forms's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every WPMU DEV forminator forms version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.36.03 CVEs
< 1.38.32 CVEs
< 1.42.12 CVEs
< 1.36.11 CVE
< 1.39.31 CVE
< 1.44.21 CVE
<= 1.36.01 CVE

Fixed in

1.36.03 CVEs
1.38.32 CVEs
1.42.12 CVEs
> 1.36.01 CVE
1.36.11 CVE
1.39.31 CVE
1.44.21 CVE

Find a version

10 CVEs

Sort

Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters
CVE-2025-5341
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (15th pct)2025-06-05
Forminator <= 1.42.0 - Order Replay Vulnerability
CVE-2025-3479
Patch
CWE-354
Medium · CVSS 5.3
EPSS 0.2% (10th pct)2025-04-17
Forminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit'
CVE-2025-3487
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (20th pct)2025-04-17
Forminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-0469
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (16th pct)2025-02-27
Medium vulnerability · 2025-02-14
CVE-2024-7052
Public exploit
Patch
Medium · CVSS 4.8
EPSS 0.3% (24th pct)2025-02-14
Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter
CVE-2025-0470
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.3% (23th pct)2025-01-31
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation
CVE-2024-9700
Patch
CWE-639
Medium · CVSS 5.3
EPSS 0.4% (31th pct)2024-10-31
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation
CVE-2024-10402
Patch
CWE-862
High · CVSS 8.8
EPSS 0.5% (41th pct)2024-10-26
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation
CVE-2024-9351
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (12th pct)2024-10-17
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation
CVE-2024-9352
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (12th pct)2024-10-17

Common weakness types

The CWE weakness categories most often found in WPMU DEV forminator forms CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WPMU DEV forminator forms CVEs were published each year.

2024

4

2025

6

Other WPMU DEV products

Browse vulnerabilities for other products by WPMU DEV.

Forminator Forms – Contact Form, Payment Form & Custom Form Builder24 CVEs Forminator10 CVEs Broken Link Checker7 CVEs Defender Security7 CVEs Branda – White Label & Branding, Free Login Page Customizer5 CVEs hustle5 CVEs Hustle – Email Marketing, Lead Generation, Optins, Popups5 CVEs branda4 CVEs

All WPMU DEV vulnerabilities

Frequently asked questions

Common questions about WPMU DEV forminator forms vulnerabilities.

How many CVEs does WPMU DEV forminator forms have?: WPMU DEV forminator forms has 10 published CVE records since 2024.
How many WPMU DEV forminator forms CVEs are in CISA KEV?: None of WPMU DEV forminator forms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WPMU DEV forminator forms vulnerabilities?: Yes — 1 of WPMU DEV forminator forms's CVEs have a known public exploit.
Which versions of WPMU DEV forminator forms are affected?: 14 distinct WPMU DEV forminator forms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WPMU DEV forminator forms CVEs?: WPMU DEV forminator forms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-354 (Improper Validation of Integrity Check Value), CWE-639 (Authorization Bypass Through User-Controlled Key).
What is the average severity of WPMU DEV forminator forms CVEs?: The average CVSS base score across WPMU DEV forminator forms's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WPMU DEV forminator forms vulnerabilities

Monitor new WPMU DEV forminator forms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing