Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 23/04/2024 Updated: 23/04/2024

Forminator before 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

Critical Forminator plugin flaw impacts over 300k WordPress sites

BleepingComputer • Bill Toulas • 20 Apr 2024

Critical Forminator plugin flaw impacts over 300k WordPress sites By Bill Toulas April 20, 2024 11:19 AM 0 The Forminator WordPress plugin used in over 500,000 sites is vulnerable to a flaw that allows malicious actors to perform unrestricted file uploads to the server. Forminator by WPMU DEV is a custom contact, feedback, quizzes, surveys/polls, and payment forms builder for WordPress sites that offers drag-and-drop functionality, extensive third-party integrations, and general versatility...

CVE-2024-28890

Vulnerability Summary

Vulnerability Trend

Recent Articles

References

Vulmon Search

About

Products

Connect