https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:31:09.398779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225472 EUVD-2026-225472 2026-10-06T17:31:09.454899+00:00 EUVD-2026-225472 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45625 fkie_cve-2024-45625 2026-10-06T17:31:09.454937+00:00

Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator.

 https://cve.radiocsirt.org/vuln/ghsa-7mq7-p8xv-m9wf GHSA-7mq7-p8xv-m9wf 2026-10-06T17:31:09.454971+00:00

Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000097 jvndb-2024-000097 2026-10-06T17:31:09.454989+00:00

WordPress Plugin "Forminator" provided by WPMU DEV assists building web forms. When accessing the page including the web form created with Forminator, some information from the URL may be embedded to the web form. This feature processes the embedded information improperly, leading to cross-site scripting vulnerability (CWE-79). Yoshimitsu Kato of Asterisk Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.