Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.52.0. This is due to the plugin not properly verifying that a user is authorized to perform an action when processing attacker-supplied Stripe PaymentIntent identifiers in the public payment flow. This makes it possible for unauthenticated attackers to submit high-value paid forms as completed by reusing a previously succeeded low-value Stripe PaymentIntent, resulting in underpayment/payment bypass conditions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-2729 The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.52.0. This is due to the plugin not properly verifying… https://www.cve.org/CVERecord?id=CVE-2026-2729
Post summary
The text announces CVE-2026-2729, highlighting an authorization bypass flaw in Forminator WordPress plugin versions up to 1.52.0, without mentioning PoC, exploit, or patch details.
🚨*CVE* CVE-2026-2729 The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.52.0. This is due to the plugin not properly verifying… https://www.cve.org/CVERecord?id=CVE-2026-2729 ----- Traducción: CVE-2026-2729 El … http://infoflow.cloud`
Post summary
The post announces an authorization bypass flaw in the Forminator WordPress plugin, identifying affected releases but providing no proof of exploitation or remediation details.