CVE-2026-96336

Summary

The Forminator plugin has an authentication bypass vulnerability that allows attackers to spoof user identities during form submissions, potentially enabling unauthorized access to protected features or data without proper authentication.

Exploitability

This is a high-severity issue with low exploit complexity requiring no user interaction, but it likely requires the attacker to have access to the target WordPress site and be able to submit forms through the Forminator plugin.

Blast radius

If exploited, this vulnerability could allow attackers to bypass authentication for form submissions, potentially leading to unauthorized data processing or access to restricted features within the Forminator plugin.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.57.3 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.