{"id":30481,"date":"2026-08-25T07:31:19","date_gmt":"2026-08-25T05:31:19","guid":{"rendered":"https:\/\/perseus.de\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/"},"modified":"2026-08-25T16:21:16","modified_gmt":"2026-08-25T14:21:16","slug":"sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins","status":"publish","type":"post","link":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/","title":{"rendered":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
24.08.2026<\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Critical vulnerabilities in WordPress plugins:

\nForminator Forms and Royal Elementor Addons.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

Current security vulnerabilities have been discovered in two widely used WordPress plugins. Forminator Forms and Royal Elementor Addons are affected. A vulnerability in Forminator Forms is particularly critical: Under certain conditions, threat actors can execute malicious code on a WordPress website without valid credentials and, in the worst case, take it over completely. The plugin is active on more than 600,000 WordPress websites.<\/strong><\/p>

A security vulnerability was also discovered in Royal Elementor Addons that could allow attackers to misuse a WordPress website to access internal systems.<\/p>

In this article, we give an overview of the two vulnerabilities, explain which versions are affected, and show what measures WordPress website operators should take now.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

1. Critical vulnerability in Forminator Forms <\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What happened?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The critical security vulnerability<\/span> CVE-2026-15748<\/span><\/a> has been discovered in the WordPress plugin <\/span>Forminator Forms<\/b>. The plugin is used, among other things, to integrate contact forms, surveys and other forms on WordPress websites.<\/span><\/p>

The vulnerability affects versions up to and including <\/span>1.56.1<\/b> and allows attackers to upload manipulated files to the web server under certain conditions. Particularly critical: <\/span>No valid access data<\/b> is required for an attack .<\/span><\/p>

The prerequisite for a successful attack is that a form created with Forminator on the affected website contains both a field for file uploads and a selection field.<\/span><\/p>

No valid credentials are required<\/strong> for the attack. Instead, the attackers use the vulnerabilities to bypass security mechanisms and take control of a vulnerable WordPress installation. After a successful compromise, web shells (programs that give attackers permanent remote access to the server)<\/strong> or other backdoors can be installed, websites can be manipulated, malware can be spread or confidential data can be stolen.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What can I do?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

We recommend the following measures to companies and website operators<\/span><\/p>

  1. :Check whether Forminator Forms is installed on your WordPress website<\/b> and which version is used.<\/span><\/li>
  2. Update the plug-in immediately<\/b> if version 1.56.1 or earlier is installed. The vulnerability has been fixed with <\/span>version 1.56.2<\/b>. If possible, install the latest version available.<\/span><\/li>
  3. As a precaution, check the WordPress installation for suspicious changes<\/b>, especially unknown files, new administrator users, or unexpected changes to existing user accounts.<\/span><\/li>
  4. Check the web server’s logs for<\/b> unusual file uploads and suspicious accesses.<\/span><\/li>
  5. If there are indications of a compromise<\/b>, the incident should be investigated more closely. A security update alone does not remove malware or backdoors that have already been infiltrated.<\/span><\/li><\/ol>

    <\/p>

    Further information on the vulnerability can be found at<\/span> Wordfence<\/span><\/a> as well as at<\/span> All About Security<\/span><\/a>. <\/span> <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    2. Vulnerability in Royal Elementor Addons<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    What happened?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    A security vulnerability was also discovered in the WordPress plugin <\/span>Royal Elementor Addons<\/b>. According<\/span> to GitHub, the CVE-2026-17123<\/span><\/a> vulnerability affects versions up to and including <\/span>1.7.1064<\/b> and was <\/span> rated “high”<\/span> with a CVSS score of 8.8 out of 10 points<\/b>.<\/p>

    Unlike the vulnerability in Forminator Forms, an attacker already needs a WordPress user account with at least contributor or employee rights. However, if criminals have already gained access to a WordPress website \u2013 for example, by exploiting the vulnerability in Forminator Forms described above \u2013 they may be able to create a user account with the necessary rights and then exploit the vulnerability in Royal Elementor Addons. In this way, several vulnerabilities can be chained together.<\/span><\/p>

    Note:<\/strong> Even already known and not yet closed WordPress vulnerabilities continue to be exploited by criminals. We have already pointed out corresponding attack possibilities and the use of webshells as a permanent backdoor in our danger warning for WP2Shell.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    How can the vulnerability be exploited?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The vulnerability is a <\/span>so-called Server-Side Request Forgery (SSRF).<\/b> Put simply, an attacker can trick the affected web server into sending requests to other systems on its behalf.<\/span><\/p>

    As a result, the WordPress website could <\/span> be misused as a starting point for access to internal systems and services<\/b> that are normally not directly accessible from the Internet. In this way, attackers could request or change internal information.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    What can I do?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    We recommend the following measures to companies and website operators:<\/span><\/p>

    1. Check if Royal Elementor Addons is installed on your WordPress website<\/b> and which version is being used.<\/span><\/li>
    2. Update the WordPress CMS to the latest available version<\/b> to prevent vulnerability chaining via WP2Shell or XSS2Shell<\/span><\/li>
    3. Check with the manufacturer whether an updated version is available<\/b> in which the vulnerability has been fixed. Currently, the<\/span> GitHub Security Advisory<\/span><\/a> does not yet show a specific patched version.<\/span><\/li>
    4. Check the existing WordPress user accounts and their permissions.<\/b> Remove accounts that are no longer needed and only assign the rights that are actually required.<\/span><\/li>
    5. If you suspect an attack, check web server and WordPress logs<\/b> for unusual activity and suspicious outbound connections.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      The current vulnerabilities show once again that not only WordPress itself, but also <\/span>installed plugins need to be checked and updated regularly<\/b>. Companies should therefore check which extensions are used on their WordPress websites, remove unnecessary plug-ins and install available security updates as soon as possible. <\/span><\/p>

      Another note: <\/span>If possible, enable automatic updates for trusted WordPress plugins<\/b> so that important security updates are installed promptly. <\/span><\/p>

      In<\/b><\/h4>

      our current incident response cases, we are increasingly observing attacks on WordPress websites in which known vulnerabilities in the CMS or plug-ins are exploited. The consequences range from the complete takeover of the website and the theft of access data to the theft of sensitive customer data. Often, outdated systems that are not updated in time are the cause.<\/span><\/p>

      We therefore recommend consistent patch management for WordPress and all plugins used. In addition, a web application firewall (WAF) can help to detect and block attack attempts at an early stage.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Do you want to stay informed about current threats and security vulnerabilities?<\/i><\/p>

      Subscribe to our newsletter and receive important warnings, recommendations for action and assessments of current cyber risks directly in your inbox.<\/i><\/p>

      Sources & Further Information<\/b><\/p>

      <\/p>

      Forminator Forms – CVE-2026-15748<\/strong><\/em><\/p>

      1. Wordfence \u2013 <\/a><\/strong><\/em><\/li>
      2. Vulnerability Intelligence Analysis https:\/\/www.wordfence.com\/blog\/2026\/08\/600000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-forminator-forms-wordpress-plugin\/ Wordfence \u2013 Vulnerability Intelligence \/ Technical Details https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/forminator\/forminator-forms-1561-unauthenticated-arbitrary-file-upload-via-forged-upload-field-configuration<\/a><\/strong><\/em><\/li>
      3. Heise Security \u2013 Forminator Forms https:\/\/www.heise.de\/news\/WordPress-Plug-in-Forminator-Forms-Kritische-Luecke-erlaubt-Codeschmuggel-11416793.html<\/a><\/strong><\/em><\/li>
      4. All About Security \u2013 Forminator Formshttps:\/\/www.all-about-security.de\/forminator-forms-luecke-beim-datei-upload-betrifft-ueber-600-000-wordpress-seiten\/<\/a><\/strong><\/em><\/li><\/ol>

        <\/p>

        Royal Elementor Addons \u2013 CVE-2026-17123<\/strong><\/em><\/p>

        1. GitHub Security Advisory \u2013 current vulnerability https:\/\/github.com\/advisories\/GHSA-mgg8-m984-r93c<\/a><\/strong><\/em><\/li><\/ol>

          <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

          \n\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t
          \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

          Critical security vulnerabilities in the WordPress plugins Forminator Forms and Royal Elementor Addons endanger numerous websites. Find out which versions are affected and which measures are important now.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[64],"tags":[],"class_list":["post-30481","post","type-post","status-publish","format-standard","hentry","category-hazard-warning"],"acf":[],"yoast_head":"\nSicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies\" \/>\n<meta property=\"og:description\" content=\"Critical security vulnerabilities in the WordPress plugins Forminator Forms and Royal Elementor Addons endanger numerous websites. Find out which versions are affected and which measures are important now.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/\" \/>\n<meta property=\"og:site_name\" content=\"Perseus Technologies\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-25T05:31:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-25T14:21:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anastasia Pamoukis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anastasia Pamoukis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/\"},\"author\":{\"name\":\"Anastasia Pamoukis\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\"},\"headline\":\"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins\",\"datePublished\":\"2026-08-25T05:31:19+00:00\",\"dateModified\":\"2026-08-25T14:21:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/\"},\"wordCount\":1043,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"articleSection\":[\"Hazard warning\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/\",\"name\":\"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"datePublished\":\"2026-08-25T05:31:19+00:00\",\"dateModified\":\"2026-08-25T14:21:16+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#primaryimage\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/perseus.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/\",\"name\":\"perseus-web.de\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/perseus.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#organization\",\"name\":\"perseus-web.de\",\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"width\":536,\"height\":172,\"caption\":\"perseus-web.de\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/perseus.de\\\/en\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\",\"name\":\"Anastasia Pamoukis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"caption\":\"Anastasia Pamoukis\"},\"sameAs\":[\"https:\\\/\\\/perseus.de\"],\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/author\\\/anastasia-pamoukis\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/","og_locale":"en_US","og_type":"article","og_title":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies","og_description":"Critical security vulnerabilities in the WordPress plugins Forminator Forms and Royal Elementor Addons endanger numerous websites. Find out which versions are affected and which measures are important now.","og_url":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/","og_site_name":"Perseus Technologies","article_published_time":"2026-08-25T05:31:19+00:00","article_modified_time":"2026-08-25T14:21:16+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025.png","type":"image\/png"}],"author":"Anastasia Pamoukis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anastasia Pamoukis","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#article","isPartOf":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/"},"author":{"name":"Anastasia Pamoukis","@id":"https:\/\/perseus.de\/en\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b"},"headline":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins","datePublished":"2026-08-25T05:31:19+00:00","dateModified":"2026-08-25T14:21:16+00:00","mainEntityOfPage":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/"},"wordCount":1043,"commentCount":0,"publisher":{"@id":"https:\/\/perseus.de\/en\/#organization"},"image":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","articleSection":["Hazard warning"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/","url":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/","name":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins - Perseus Technologies","isPartOf":{"@id":"https:\/\/perseus.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#primaryimage"},"image":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","datePublished":"2026-08-25T05:31:19+00:00","dateModified":"2026-08-25T14:21:16+00:00","breadcrumb":{"@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#primaryimage","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png"},{"@type":"BreadcrumbList","@id":"https:\/\/perseus.de\/en\/sicherheitswarnung-kritische-schwachstellen-in-wordpress-plugins\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/perseus.de\/en\/"},{"@type":"ListItem","position":2,"name":"Sicherheitswarnung: Kritische Schwachstellen in WordPress-Plugins"}]},{"@type":"WebSite","@id":"https:\/\/perseus.de\/en\/#website","url":"https:\/\/perseus.de\/en\/","name":"perseus-web.de","description":"","publisher":{"@id":"https:\/\/perseus.de\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/perseus.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/perseus.de\/en\/#organization","name":"perseus-web.de","url":"https:\/\/perseus.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","width":536,"height":172,"caption":"perseus-web.de"},"image":{"@id":"https:\/\/perseus.de\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/perseus.de\/en\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b","name":"Anastasia Pamoukis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","caption":"Anastasia Pamoukis"},"sameAs":["https:\/\/perseus.de"],"url":"https:\/\/perseus.de\/en\/author\/anastasia-pamoukis\/"}]}},"_links":{"self":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/comments?post=30481"}],"version-history":[{"count":2,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30481\/revisions"}],"predecessor-version":[{"id":30483,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30481\/revisions\/30483"}],"wp:attachment":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/media?parent=30481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/categories?post=30481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/tags?post=30481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}