Security Advisory

CVE-2026-19220

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-26 06:00:19

Last updated 2026-08-26 14:43:09

Assigner WPScan

CVSS score 3.7

State PUBLISHED

Description

The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it.

← Browse all CVEs View on cve.org ↗