CVE-2026-19221

The Forminator Forms plugin for WordPress prior to version 1.57.0.5 is vulnerable due to inadequate restrictions on a network-wide setting, enabling site administrators within a multisite environment to execute arbitrary code across the entire network. This could lead to significant security breaches, including unauthorized access and control over multiple sites. WordPress multisite administrators should prioritize updating this plugin to mitigate potential exploitation risks.