low3.7
CVE-2026-19220
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing un…
Impact
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it.
Affected products
| Product | Affected versions |
|---|---|
| Forminator Forms WordPress Plugin | before 1.57.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.