CVE-2026-96341

Summary

A privilege assignment flaw in Forminator allows attackers to escalate their privileges, potentially gaining administrative access to WordPress sites. This vulnerability arises from incorrect handling of user permissions during form processing.

Exploitability

Exploitation is relatively straightforward requiring no special preconditions, as the vulnerability affects unauthenticated users and can be triggered through form submissions.

Blast radius

The impact could be significant across multiple WordPress sites using Forminator plugin versions 1.57.3 and earlier, potentially allowing attackers to gain full administrative control over affected installations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Forminator version 1.57.4 or later to remediate this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.