CVE-2026-96341: WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability
Published Oct 10, 2026
·Updated
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
Affected Software
1 affected component
WPMU DEV Forminator<=1.57.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Forminator pluginto a version that resolves this vulnerability.Fixed in 1.58.0
Event History
Oct 10, 2026
CVE Published
via MITRE·06:09 PM
Data Sourced
via MITRE·06:09 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which Forminator versions are affected?
Forminator versions through 1.57.3 are affected. The available data does not identify the first fixed version.
2
Does exploitation require an existing account or user interaction?
No. The CVSS vector indicates that the issue is network-accessible, requires no privileges, and requires no user interaction.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation. The listed impact includes high integrity impact and low availability impact, with no confidentiality impact indicated.