Security4 hSeptember 22, 2026, 20:01

Forminator WordPress plugin hit by 9.1-severity vulnerability

Patchstack disclosed CVE-2026-92229 in the Forminator WordPress plugin affecting versions up to and including 1.57.2, rated CVSS 9.1. The flaw allows unauthenticated arbitrary shortcode execution via the current_url parameter, and is fixed in version 1.57.3. The plugin runs on more than 600,000 websites.

HackerNoon Open source

Forminator WordPress plugin hit by 9.1-severity vulnerability

CVE-2026-92229 carries a CVSS score of 9.1
Exploitation needs no authentication via current_url parameter
Fix shipped in Forminator 1.57.3 on September 17
Plugin is installed on over 600,000 websites

#WordPress#Forminator#Patchstack

Western Australia Police report 900K facial scans in 3-month LFR trial

Security

Check Point warns of Management Server zero-day exploited in attacks

Security

University of Toronto researchers amplify Rowhammer attacks on ECC-protected GPUs

Security

Forminator WordPress plugin hit by 9.1-severity vulnerability

Western Australia Police report 900K facial scans in 3-month LFR trial

Check Point warns of Management Server zero-day exploited in attacks

University of Toronto researchers amplify Rowhammer attacks on ECC-protected GPUs

91% of workers feel stressed at work over IT security risks