CVE-2026-19220
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Aug 26, 2026
Vendor
unknown
Description
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it.