{"id":"CVE-2026-96335","published":"2026-10-07T18:17:32.043","lastModified":"2026-10-08T17:24:31.040","description":"Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Forminator: from n/a through 1.57.2.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/forminator/vulnerability/wordpress-forminator-plugin-1-57-2-broken-access-control-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing authorization flaw in Forminator allows attackers to bypass access controls and perform unauthorized actions, potentially leading to data manipulation or system compromise. This vulnerability affects versions up to 1.57.2.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as the vulnerability stems from incorrectly configured access control security levels.","blast_radius":"The impact could be significant across all Forminator features that rely on proper authorization checks, potentially allowing attackers to manipulate forms and related data without authentication.","remediation":"Upgrade to version 1.57.3 or later to remediate this missing authorization vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["authorization","access-control","wordpress","form"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:03:09.102Z"}}