Forminator Forms – Contact Form, Payment Form & Custom Form Builder

WordPress plugin · forminator · WordPress.org ↗

Latest v1.57.3 Last release Sep 17, 2026 Tested up to WP 7.1.1 600,000+ active installs

Critical

High

Known total

Unfixed

Running Forminator Forms – Contact Form, Payment Form & Custom Form Builder on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.3 WPVulnerability	< 1.57.3	v1.57.3	CVE-2026-92229	Aug 28, 2026
CRITICAL CVSS 9.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.1 WPVulnerability	< 1.57.1	v1.57.1	CVE-2026-66583	Aug 20, 2026
CRITICAL CVSS 9.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.56.2 WPVulnerability	< 1.56.2	v1.56.2	CVE-2026-15748	Aug 18, 2026
CRITICAL CVSS 9.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.25.0 WPVulnerability	< 1.25.0	v1.25.0	CVE-2023-4596	Aug 29, 2023
HIGH CVSS 8.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.2.1 WPVulnerability	< 1.57.2.1	v1.57.2.1	CVE-2026-87067	Sep 20, 2026
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.0.3 WPVulnerability	< 1.57.0.3	v1.57.0.3	CVE-2026-18323	Aug 24, 2026
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.0.1 WPVulnerability	< 1.57.0.1	v1.57.0.1	CVE-2026-18328	Aug 24, 2026
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.0.2 WPVulnerability	< 1.57.0.2	v1.57.0.2	CVE-2026-18324	Aug 24, 2026
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.0.5 WPVulnerability	< 1.57.0.5	v1.57.0.5	CVE-2026-19221	Aug 22, 2026
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.56.2 WPVulnerability	< 1.56.2	v1.56.2	CVE-2026-18325	Aug 5, 2026
HIGH CVSS 8.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.56.0.1 WPVulnerability	< 1.56.0.1	v1.56.0.1	CVE-2026-28111	Aug 3, 2026
HIGH CVSS 7.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.56.1 WPVulnerability	< 1.56.1	v1.56.1	CVE-2026-28143	Aug 3, 2026
HIGH CVSS 7.1	WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability CVE.org	<=1.55.0.1	unfixed	CVE-2026-57814	Jul 13, 2026
HIGH CVSS 7.5	WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability CVE.org	<=1.55.0.2	unfixed	CVE-2026-57815	Jul 13, 2026
HIGH CVSS 7.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.0.2 WPVulnerability	< 1.55.0.2	v1.55.0.2	CVE-2026-57814	Jul 8, 2026
HIGH CVSS 7.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.1 WPVulnerability	< 1.55.1	v1.55.1	CVE-2026-57815	Jul 8, 2026
HIGH CVSS 7.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.53.2 WPVulnerability	< 1.53.2	v1.53.2	CVE-2026-56071	Jun 24, 2026
HIGH CVSS 7.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52.2 WPVulnerability	< 1.52.2	v1.52.2	CVE-2026-5192	May 4, 2026
HIGH CVSS 8.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.44.3 WPVulnerability	< 1.44.3	v1.44.3	CVE-2025-6464	Jul 1, 2025
HIGH CVSS 8.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.44.3 WPVulnerability	< 1.44.3	v1.44.3	CVE-2025-6463	Jul 1, 2025
HIGH CVSS 7.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.36.0 WPVulnerability	< 1.36.0	v1.36.0	CVE-2024-10402	Oct 25, 2024
HIGH CVSS 7.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.2 WPVulnerability	< 1.29.2	v1.29.2	CVE-2024-7389	Aug 1, 2024
HIGH CVSS 7.2	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.3 WPVulnerability	< 1.29.3	v1.29.3	CVE-2024-31077	Apr 23, 2024
HIGH CVSS 7.1	WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE.org	<=1.29.0	unfixed	CVE-2024-29777	Mar 27, 2024
HIGH CVSS 7.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.1 WPVulnerability	< 1.29.1	v1.29.1	CVE-2024-29777	Mar 25, 2024
MEDIUM CVSS 6.6	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.2.1 WPVulnerability	< 1.57.2.1	v1.57.2.1	CVE-2026-87068	Sep 20, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.2 WPVulnerability	< 1.57.2	v1.57.2	CVE-2026-82220	Aug 28, 2026
MEDIUM CVSS 6.6	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.0.7 WPVulnerability	< 1.57.0.7	v1.57.0.7	CVE-2026-19222	Aug 22, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.1 WPVulnerability	< 1.55.1	v1.55.1	CVE-2026-12998	Aug 15, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52 WPVulnerability	< 1.52	v1.52	CVE-2026-6222	May 6, 2026
MEDIUM CVSS 6.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.53.0.1 WPVulnerability	< 1.53.0.1	v1.53.0.1	CVE-2026-6214	May 6, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52.1 WPVulnerability	< 1.52.1	v1.52.1	CVE-2026-2729	May 4, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.50.3 WPVulnerability	< 1.50.3	v1.50.3	CVE-2026-32409	Feb 22, 2026
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.49.2 WPVulnerability	< 1.49.2	v1.49.2	CVE-2025-14782	Jan 8, 2026
MEDIUM CVSS 4.9	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.45.1 WPVulnerability	< 1.45.1	v1.45.1	CVE-2025-7638	Jul 17, 2025
MEDIUM CVSS 6.4	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.44.2 WPVulnerability	< 1.44.2	v1.44.2	CVE-2025-5341	Jun 4, 2025
MEDIUM CVSS 5.4	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.42.1 WPVulnerability	< 1.42.1	v1.42.1	CVE-2025-3487	Apr 16, 2025
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.42.1 WPVulnerability	< 1.42.1	v1.42.1	CVE-2025-3479	Apr 16, 2025
MEDIUM CVSS 5.4	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.39.3 WPVulnerability	< 1.39.3	v1.39.3	CVE-2025-0469	Feb 26, 2025
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.38.3 WPVulnerability	< 1.38.3	v1.38.3	CVE-2025-0470	Jan 30, 2025
MEDIUM CVSS 4.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.38.3 WPVulnerability · PoC available	< 1.38.3	v1.38.3	CVE-2024-7052	Jan 24, 2025
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.36.1 WPVulnerability	< 1.36.1	v1.36.1	CVE-2024-9700	Oct 30, 2024
MEDIUM CVSS 4.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.36.0 WPVulnerability	< 1.36.0	v1.36.0	CVE-2024-9352	Oct 16, 2024
MEDIUM CVSS 4.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.36.0 WPVulnerability	< 1.36.0	v1.36.0	CVE-2024-9351	Oct 16, 2024
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.34.1 WPVulnerability	< 1.34.1	v1.34.1	CVE-2024-45625	Sep 9, 2024
MEDIUM CVSS 5.4	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.15.4 WPVulnerability	< 1.15.4	v1.15.4	CVE-2024-31857	Apr 23, 2024
MEDIUM CVSS 5.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.0 WPVulnerability	< 1.29.0	v1.29.0	CVE-2024-28890	Apr 18, 2024
MEDIUM CVSS 5.4	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.3 WPVulnerability	< 1.29.3	v1.29.3	CVE-2024-3053	Apr 8, 2024
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.29.1 WPVulnerability	< 1.29.1	v1.29.1	CVE-2024-1794	Mar 29, 2024
MEDIUM CVSS 4.9	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.28.0 WPVulnerability	< 1.28.0	v1.28.0	CVE-2023-6133	Nov 14, 2023
MEDIUM CVSS 4.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.27.0 WPVulnerability	< 1.27.0	v1.27.0	CVE-2023-5119	Oct 27, 2023
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.24.4 WPVulnerability	< 1.24.4	v1.24.4	CVE-2023-3134	Jul 10, 2023
MEDIUM CVSS 4.8	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.15.4 WPVulnerability	< 1.15.4	v1.15.4	CVE-2021-24700	Oct 20, 2021
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.14.12 WPVulnerability	< 1.14.12	v1.14.12	CVE-2021-36821	Jul 14, 2021
MEDIUM CVSS 4.3	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.13.5 WPVulnerability	< 1.13.5	v1.13.5	CVE-2021-4417	Mar 1, 2021
MEDIUM CVSS 6.5	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6 WPVulnerability	< 1.6	v1.6	CVE-2019-9568	Feb 6, 2019
MEDIUM CVSS 6.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6 WPVulnerability	< 1.6	v1.6	CVE-2019-9567	Feb 6, 2019
LOW CVSS 3.1	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.24.1 WPVulnerability · PoC available	< 1.24.1	v1.24.1	CVE-2023-2010	Jun 12, 2023
NONE CVSS 0.0	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.14.8.1 WPVulnerability	< 1.14.8.1	v1.14.8.1	CVE-2021-4342	Jun 7, 2023
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.57.1 WPVulnerability	< 1.57.1	v1.57.1	CVE-2026-19220	Aug 26, 2026
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.50.3 WPVulnerability	< 1.50.3	v1.50.3	CVE-2026-2002	Feb 16, 2026
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 WPVulnerability	< 1.23.3	v1.23.3	—	Apr 13, 2023
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 WPVulnerability	< 1.23.3	v1.23.3	—	Apr 12, 2023
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 WPVulnerability	< 1.23.3	v1.23.3	—	Apr 12, 2023
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 WPVulnerability	< 1.23.3	v1.23.3	—	Apr 12, 2023
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.14.8.1 WPVulnerability	< 1.14.8.1	v1.14.8.1	—	Mar 1, 2021
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.13.5 WPVulnerability	< 1.13.5	v1.13.5	—	Sep 16, 2020
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6 WPVulnerability	< 1.6	v1.6	—	Feb 6, 2019
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.6 WPVulnerability	< 1.6	v1.6	—	Feb 6, 2019
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.14.8.1 WPVulnerability	< 1.14.8.1	v1.14.8.1	—	—
UNKNOWN	Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.14.8.1 WPVulnerability	< 1.14.8.1	v1.14.8.1	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.