[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVA2hlmBUI0gAeSiU5CdhoVSTCB7vEX4RzaAYgsFgwJI":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20,"patch_diff_files":21,"patch_trac_url":9,"research_status":30,"research_verified":31,"research_rounds_completed":32,"research_plan":33,"research_summary":9,"research_vulnerable_code":9,"research_fix_diff":9,"research_exploit_outline":9,"research_model_used":34,"research_started_at":35,"research_completed_at":36,"research_error":9,"poc_status":9,"poc_video_id":9,"poc_summary":9,"poc_steps":9,"poc_tested_at":9,"poc_wp_version":9,"poc_php_version":9,"poc_playwright_script":9,"poc_exploit_code":9,"poc_has_trace":31,"poc_model_used":9,"poc_verification_depth":9,"poc_exploit_code_gated":31,"source_links":37},"CVE-2026-57814","forminator-forms-contact-form-payment-form-custom-form-builder-unauthenticated-stored-cross-site-scripting-2","Forminator Forms – Contact Form, Payment Form & Custom Form Builder \u003C= 1.55.0.1 - Unauthenticated Stored Cross-Site Scripting","The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.55.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","forminator",null,"\u003C=1.55.0.1","1.55.0.2","high",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-07-08 00:00:00","2026-07-14 19:36:52",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc5697616-4e19-45a3-b860-623af66469bc?source=api-prod",7,[22,23,24,25,26,27,28,29],"assets\u002Fjs\u002Ffront\u002Ffront.loader.js","build\u002Ffront\u002Ffront.multi.min.js","constants.php","forminator.php","languages\u002Fforminator.pot","library\u002Fclass-core.php","library\u002Ffields\u002Faddress.php","library\u002Ffields\u002Fconsent.php","researched",false,3,"php`\n- Action: `forminator_submit_form_ajax` (or `forminator_submit_poll_ajax`)\n- Parameter: The value of the \"Other\" input field (e.g., `radio-1-other`).\n- Authentication: None.\n\n**Exploitation Strategy:**\n1. Identify a Poll or Form with a Radio field that has the \"Other\" option enabled.\n2. Submit the form\u002Fpoll via AJAX with a payload in the \"Other\" field.\n3. Access the page where the results are displayed (or wait for an admin to view the entries).\n\n**Nonce Acquisition:**\nForminator forms usually require a nonce for submission.\nThe nonce is localized in the page source.\nJS variable: `window.ForminatorFront?.nonce` or similar.\nWait, let's look at `front.loader.js`:\n```javascript\ndefaults   = {\n    \u002F\u002F ...\n     nonce: false,\n    \u002F\u002F ...\n};\n\u002F\u002F ...\nparam.nonce = this.settings.nonce;\n```\nThe loader uses a nonce.\n\nLet's find the localization key.\nIn Forminator, it's usually `forminator_front_config`.\nKey: `forminator_front_config.admin_ajax_nonce` or the form's specific nonce.\n\nActually, Forminator generates a unique nonce for each form.\nIt's often found in a hidden input field: `name=\"forminator_nonce\"`.\n\n**Wait, I","gemini-3-flash-preview","2026-07-16 14:50:35","2026-07-16 14:52:30",{"type":38,"vulnerable_version":39,"fixed_version":11,"vulnerable_browse":40,"vulnerable_zip":41,"fixed_browse":42,"fixed_zip":43,"all_tags":44},"plugin","1.55.0.1","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fforminator\u002Ftags\u002F1.55.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforminator.1.55.0.1.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fforminator\u002Ftags\u002F1.55.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforminator.1.55.0.2.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fforminator\u002Ftags"]