CyberRota Analysis
AI-GeneratedThe Forminator Forms plugin for WordPress prior to version 1.57.1 is vulnerable as it fails to verify whether site registration is enabled on a multisite network, allowing unauthenticated users to create new sites and obtain administrator privileges. This could lead to unauthorized access and potential exploitation of the network. WordPress administrators, particularly those using multisite configurations, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it.