Vulnerabilities > CVE-2024-10402 - Unspecified vulnerability in Wpmudev Forminator Forms

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wpmudev

NVD

Published: 2024-10-26

Updated: 2025-02-05

Summary

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.35.1. This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions granted by an Administrator, to create new or edit existing forms, including updating the default registration role to Administrator on User Registration forms.

Vulnerable Configurations

Part	Description	Count
Application	Wpmudev Wpmudev Forminator Forms - Wpmudev Forminator Forms 1.5.1 Wpmudev Forminator Forms 1.5.2 Wpmudev Forminator Forms 1.5.3.1 Wpmudev Forminator Forms 1.5.4 Wpmudev Forminator Forms 1.6.0.2 Wpmudev Forminator Forms 1.6.0.3 Wpmudev Forminator Forms 1.6.1 Wpmudev Forminator Forms 1.6.2 Wpmudev Forminator Forms 1.6.3 Wpmudev Forminator Forms 1.7.0 Wpmudev Forminator Forms 1.7.0.1 Wpmudev Forminator Forms 1.7.1.3 Wpmudev Forminator Forms 1.8.1 Wpmudev Forminator Forms 1.9.0 Wpmudev Forminator Forms 1.9.1 Wpmudev Forminator Forms 1.9.2 Wpmudev Forminator Forms 1.10.1 Wpmudev Forminator Forms 1.10.2 Wpmudev Forminator Forms 1.11.1 Wpmudev Forminator Forms 1.11.2 Wpmudev Forminator Forms 1.11.3 Wpmudev Forminator Forms 1.11.4 Wpmudev Forminator Forms 1.12.1 Wpmudev Forminator Forms 1.12.1.1 Wpmudev Forminator Forms 1.13.3 Wpmudev Forminator Forms 1.13.4 Wpmudev Forminator Forms 1.13.5 Wpmudev Forminator Forms 1.14.0 Wpmudev Forminator Forms 1.14.6 Wpmudev Forminator Forms 1.14.7 Wpmudev Forminator Forms 1.14.8 Wpmudev Forminator Forms 1.14.8.1 Wpmudev Forminator Forms 1.14.9 Wpmudev Forminator Forms 1.14.10.1 Wpmudev Forminator Forms 1.14.11 Wpmudev Forminator Forms 1.14.12 Wpmudev Forminator Forms 1.14.12.1 Wpmudev Forminator Forms 1.15.0.1 Wpmudev Forminator Forms 1.15.2 Wpmudev Forminator Forms 1.15.4 Wpmudev Forminator Forms 1.15.7 Wpmudev Forminator Forms 1.15.9 Wpmudev Forminator Forms 1.15.11 Wpmudev Forminator Forms 1.15.12 Wpmudev Forminator Forms 1.15.13 Wpmudev Forminator Forms 1.15.14 Wpmudev Forminator Forms 1.16.2 Wpmudev Forminator Forms 1.17.1 Wpmudev Forminator Forms 1.17.2 Wpmudev Forminator Forms 1.18.1 Wpmudev Forminator Forms 1.18.2 Wpmudev Forminator Forms 1.19.0 Wpmudev Forminator Forms 1.20.1 Wpmudev Forminator Forms 1.21.0 Wpmudev Forminator Forms 1.22.1 Wpmudev Forminator Forms 1.23.3 Wpmudev Forminator Forms 1.24.1 Wpmudev Forminator Forms 1.24.4 Wpmudev Forminator Forms 1.24.5 Wpmudev Forminator Forms 1.24.6 Wpmudev Forminator Forms 1.25.0 Wpmudev Forminator Forms 1.25.1 Wpmudev Forminator Forms 1.25.2 Wpmudev Forminator Forms 1.26.0 Wpmudev Forminator Forms 1.27.0 Wpmudev Forminator Forms 1.28.0 Wpmudev Forminator Forms 1.28.1 Wpmudev Forminator Forms 1.29.0 Wpmudev Forminator Forms 1.29.2 Wpmudev Forminator Forms 1.29.3 Wpmudev Forminator Forms 1.30.2 Wpmudev Forminator Forms 1.31.0 Wpmudev Forminator Forms 1.32.0 Wpmudev Forminator Forms 1.33.0 Wpmudev Forminator Forms 1.34.0 Wpmudev Forminator Forms 1.34.1 Wpmudev Forminator Forms 1.35.0 Wpmudev Forminator Forms 1.35.1	79

Summary

Vulnerable Configurations

References