CVE-2026-56071: WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability
Published Jun 25, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.
Affected Software
1 affected component
wordpress/forminator<=1.53.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Forminator pluginto a version that resolves this vulnerability.Fixed in 1.53.2
Event History
Jun 25, 2026
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-56071?
CVE-2026-56071 has a high severity rating of 7.1.
2
What type of vulnerability is CVE-2026-56071?
CVE-2026-56071 is an Unauthenticated Cross Site Scripting (XSS) vulnerability.
3
Is my WordPress site at risk with CVE-2026-56071?
Yes, if you are using Forminator plugin version 1.53.1 or lower, your site is at risk.
4
How do I fix CVE-2026-56071?
To fix CVE-2026-56071, upgrade the Forminator plugin to version 1.54 or later.
5
What impact does CVE-2026-56071 have on a website?
CVE-2026-56071 can allow attackers to execute malicious scripts in the user's browser, leading to stolen data or session hijacking.