https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T20:55:20.815864+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-19220 CVE-2026-19220 — Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation 2026-09-28T20:55:20.817559+00:00

Affected: Unknown Forminator Forms

The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it.