Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.2

Forminator plugin may let users gain admin rights

CVE-2026-96341 · published 25 days ago
Summary

The Forminator plugin for WordPress can let a regular user increase their privileges to an administrator level. This could let an attacker change site settings, view private data, or install additional software. Update the plugin to the latest version or remove it if you cannot apply the update.

What to do
  • Update wpmu dev forminator to version 1.58.0.
Affected software
VendorProductAffected versions
wpmu dev forminator <= 1.57.3
Fix: upgrade to 1.58.0
Original advisory text
WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.2 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
Timeline
Published10 Oct 2026
Updated4 Nov 2026
First seen10 Oct 2026
Sources
CVE-2026-96341 · NVD
CVE-2026-96341 · MITRE
Track software like this
Free during beta