01 Record

CVE-2026-19221

Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

UnratedPUBLISHEDCNA: WPScan

Base scoreUnratedNo CVSS vector published

02 Description

Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

Published: 2026-08-22 06:00Z1 HR AGO
Last updated: 2026-08-22 06:00Z1 HR AGO
Reserved: 2026-08-07
Assigning CNA: WPScan
Record state: PUBLISHED
Severity: Unrated: no CVSS score published
CVSS vector: Not published
Weaknesses: No CWE assigned
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 093a819e8313463fa0a57a5a938a0e094bf82eb23d826a8d2fc9167117dca3b1

VendorProductVersionsPlatforms

UnknownForminator Forms1.40.0 to < 1.57.0.5—