{"vulnerability": "cve-2026-92229", "sightings": [{"uuid": "80e4e5fe-b3a7-4725-82b9-90c00de1d853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtso26brn2b", "content": "\ud83d\udea8 CVE-2026-92229 \u2014 CVSS 9.1 CRITICAL\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnera...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92229\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:33.569490Z"}, {"uuid": "9125e82e-33a1-428f-9c56-3c3c212f07cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117295823161676364", "content": "CVE-2026-92229: CRITICAL code injection in wpmudev Forminator Forms plugin (\u22641.57.2). Unauthenticated attackers can execute arbitrary shortcodes, risking full WordPress site compromise. Restrict or disable plugin now. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-forminator-8ac627c2b84841fc #OffSeq #WordPress #CVE202692229", "creation_timestamp": "2026-09-19T04:30:24.251891Z"}, {"uuid": "c2259acb-58c8-420e-8242-a79bd5ff07cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvttwwno3z2e", "content": "CRITICAL: wpmudev Forminator Forms plugin (\u22641.57.2) vulnerable to code injection \u2014 unauthenticated attackers can execute arbitrary shortcodes. Restrict or disable until patched. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-...", "creation_timestamp": "2026-09-19T04:30:27.309488Z"}, {"uuid": "7da7d550-85a3-472c-95b5-dad30326a91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu36tepbc2r", "content": "CVE-2026-92229\nThe Forminator Forms plugin for WordPress (all versions up to 1.57.2) can let anyone on the internet cause the site to run hidden code snippets called shortcodes. This could let attackers display unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T06:40:06.746002Z"}, {"uuid": "53d814ad-d61a-48e5-8ecb-a211584ed549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jakjo52b", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPres...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:51.858521Z"}, {"uuid": "4a89aa89-2ff7-4e75-996b-46ce1918881f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvu5k5jzrh2k", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPres...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:22:14.306937Z"}, {"uuid": "1dc2e2bc-fe26-4b2d-8859-697ebd771fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102802", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92229\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92229 \u2014 Forminator \u22641.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.656409Z"}, {"uuid": "23cfda1a-31d4-4e3b-ad98-e85f5d5da9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvxsze5ckq2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92229: The The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcod\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-92229\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-20T18:24:31.995186Z"}, {"uuid": "977a898a-2a4d-410d-91aa-beb38f05bf32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mvzvo5xto42w", "content": "Forminator Forms \u22641.57.2 has an unauthenticated shortcode-execution hole (CVE-2026-92229). If you run quizzes or forms with it, update to 1.57.3 now. No login needed for the bad request.\n\npatchstack.com/database/wor...\n\n#WordPress #WordPressSecurity", "creation_timestamp": "2026-09-21T14:17:17.461846Z"}, {"uuid": "61afc8f1-9656-408f-a4ce-8469e57de763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-22T07:00:07.822656Z"}, {"uuid": "c02e979f-806e-4aec-b445-301e574b0f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-22T07:00:10.097483Z"}, {"uuid": "f23b63d9-cc01-4b20-b6f7-5679010ccb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-23T00:00:14.562191Z"}, {"uuid": "4aa2c5a0-1069-443e-9b84-76ec73435e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-23T00:00:12.849655Z"}, {"uuid": "6379e7de-946b-491e-8517-d90eac020664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw7ggt2aij27", "content": "CVE-2026-92229 Forminator Forms WordPress plugin, CVSS 9.1. Unauthenticated attackers can run arbitrary shortcodes on all versions up to 1.57.2. No patch yet. Disable the plugin or restrict access now. https://www.valtersit.com/cve/CVE-2026-92229/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-23T19:00:43.614949Z"}, {"uuid": "60f06f0c-6245-4635-8441-a75275df32a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117321894451239766", "content": "CVE-2026-92229 Forminator Forms WordPress plugin, CVSS 9.1. Unauthenticated attackers can run arbitrary shortcodes on all versions up to 1.57.2. No patch yet. Disable the plugin or restrict access now. https://www.valtersit.com/cve/CVE-2026-92229/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-23T19:00:47.253161Z"}]}