CVE-2026-102388: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3...

PT-2026-109652

Name of the Vulnerable Software and Affected Versions WPMU DEV Forminator versions prior to 1.57.4 Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a condition where malicious scripts are permanently stored on the target server an...

CVE-2026-96336

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...

EUVD-2026-95589

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...

CVE-2026-96336 WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...

CVE-2026-96336

The WPMU DEV Forminator WordPress plugin is vulnerable to an Authentication Bypass by Spoofing vulnerability (CWE-290) in versions up to and including 1.57.2 . This flaw allows for Identity Spoofing , where an attacker can bypass authentication mechanisms. The impact is categorized as HIGH severi...

PT-2026-108856

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107292 via pydantic-ai (>=1.34.0, <=1.107.4)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107292 Source advisory: SNYK:PYTHON-PYDANTICAI-20848911...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107292 via pydantic-ai (>=1.34.0, <=1.107.4)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107292 Source advisory: GHSA-Q2XC-RRXJ-58X9...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107295 via pydantic-ai (>=1.34.0, <=1.107.2)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107295 Source advisory: OSV:GHSA-H4XC-3QFQ-JF93...

clai (>=1.77.0, <=1.107.5), compas-lca (>=1.0.0, <=1.0.2) +20 more potentially affected by CVE-2026-107290 via pydantic-ai (>=1.77.0, <=1.107.5)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

ara-cli (>=0.1.14.13, <=0.1.14.14), clai (>=1.56.0, <=1.107.5) +32 more potentially affected by CVE-2026-107289 via pydantic-ai (>=1.56.0, <=1.107.5)

pydantic-ai PYPI version =1.56.0, =0.1.14.13, =1.56.0, =1.0.0, =1.0.0, =0.1.102, =26.1.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107289 Source advisory: SNYK:PYTHON-PYDANTICAI-20848913...

CVE-2026-106611

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106611 WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

EUVD-2026-94955

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...

CVE-2026-106611

The WPMU DEV Forminator plugin (versions n/a through 1.57.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is associated with CWE-352 and has a High base sever...

EUVD-2026-91667

Next.js has information disclosure in development server's Model Context Protocol endpoint...

EUVD-2026-91673

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass...

CVE-2026-96335

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...

CVE-2026-96335 WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...