Vulnerability Description
The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.
References
FAQ
What is CVE-2026-19221?
CVE-2026-19221 is a documented vulnerability. The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execut...
How severe is CVE-2026-19221?
CVSS scoring is not yet available for CVE-2026-19221. Check NVD for updates.
Is there a patch for CVE-2026-19221?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.