Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 10:42:43 +0000 CVE-2026-111579 — Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway… https://db.gcve.eu/vuln/cve-2026-111579 <p><strong>Affected:</strong> Unknown Forminator Forms</p> <p>The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form&#39;s configured payment gateway is unavailable, allowing unauthenticated visitors to complete a payment-gated User Registration form without paying and be assigned the form&#39;s configured role, up to administrator, after the gateway has been connected and later disconnected.</p> <p><strong>Affected:</strong> Unknown Forminator Forms</p> <p>The Forminator Forms WordPress plugin before 1.58.4 does not enforce payment on the server side when a form&#39;s configured payment gateway is unavailable, allowing unauthenticated visitors to complete a payment-gated User Registration form without paying and be assigned the form&#39;s configured role, up to administrator, after the gateway has been connected and later disconnected.</p> https://db.gcve.eu/vuln/cve-2026-111579