CVE-2026-87071

5.3 Moyenne

Publiée le 23/09/2026 à 13:17 · Modifiée le 23/09/2026 à 20:13 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may supply, and does not exclude the keys WordPress reserves for its own use, so unauthenticated visitors submitting a public form that collects post content can attach metadata of their choosing to the post their submission creates.

Traduire en français

Produits concernés

Unknown Forminator Forms

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-20

Références

https://wpscan.com/vulnerability/9d831b9d-c05d-4b9a-8b65-7e1e35e68510/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories