Over 300k WordPress Sites Affected by Forminator Plugin Flaws

Threat Level – Red | Vulnerability Report
Download PDF

The Forminator WordPress plugin, utilized by multiple websites, is vulnerable to multiple security flaws, including CVE-2024-28890, CVE-2024-31077, and CVE-2024-31857. These vulnerabilities enable malicious actors to carry out various attacks, including unrestricted file uploads to the server, triggering denial-of-service (DoS) attacks, and executing cross-site scripting (XSS) attacks.

Threat Level – Red | Vulnerability Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox

Cyber Horizons 2025

What Last Year’s Attacks Reveal About Today’s Risks

Watch the Webinar on-demand and get a FREE copy of our Cyber Horizons 2025 report.

Our Speakers
Speaker 1

Prateek Bhajanka Global Field CISO & Former Gartner Analyst Hive Pro Inc.

Speaker 2

Ankit Mani Manager Threat Intel HiveForce Labs

Speaker 3

Sreevani Tonipe Senior Threat Researcher HiveForce Labs