Skip to content
Saturday, August 22, 2026
KAJ NEWSCYBER · PRIVACY · SECURITY

CVE-2026-19221

The CVE Severity Digest turns the National Vulnerability Database feed into a prioritized security briefing. It groups affected software into practical product families, distinguishes patch and mitigation references from general citations, and ranks the vulnerabilities most likely to matter to technology operators while preserving direct links to the official record.

Records
199
Last changed
Update schedule
17 6 * * * UTC
Coverage
08/15/2026–08/22/2026
Method
Methodology
CVE
CVE-2026-19221
Description
The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.
Published
08/22/2026
Severity
UNKNOWN
CVSS
Priority score
20