Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2024-28890

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

  • Published: Apr 23, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-28890
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

Software From Fixed in
incsub / forminator - 1.29.0