CVE-2026-96336: WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Q: Who can exploit this issue?

The vector is network-accessible and requires no privileges or user interaction. An unauthenticated remote attacker can exploit the authentication-bypass-by-spoofing condition.

Q: What security impact is identified?

The reported impact is integrity loss, with no confidentiality or availability impact indicated. The vulnerability is characterized as a payment bypass and identity spoofing issue.

Q: Which installations are affected?

Forminator versions through 1.57.2 are affected. The provided data does not identify a fixed version or any configuration prerequisite.

Published Oct 9, 2026

Updated

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

Affected Software

1 affected component

WPMU DEV Forminator<=1.57.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Forminator plugin to a version that resolves this vulnerability.
Fixed in 1.57.2.1

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vector is network-accessible and requires no privileges or user interaction. An unauthenticated remote attacker can exploit the authentication-bypass-by-spoofing condition.

What security impact is identified?

The reported impact is integrity loss, with no confidentiality or availability impact indicated. The vulnerability is characterized as a payment bypass and identity spoofing issue.

Which installations are affected?

Forminator versions through 1.57.2 are affected. The provided data does not identify a fixed version or any configuration prerequisite.

CVE-2026-96336: WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What security impact is identified?

Which installations are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What security impact is identified?

Which installations are affected?