Virus Scan for Forminator on WordPress
A file upload form powered by Forminator or any other WordPress form plugin introduces the risk of users accidentally or attackers on purpose uploading viruses, trojans, ransomware, and other kinds of malware. Without an antivirus solution, a file upload form may be the entry point for malware into your systems. Therefore, virus scanning of file uploads via forms built with Forminator is essential.

attachmentAV for WordPress (>= 1.9.0) supports forms created by the popular Forminator plugin. When a user tries to upload an infected file, attachmentAV will block submitting the form as shown in the following screenshot.
By the way, attachmentAV for WordPress supports WPForms, Gravity Forms, Formidable Forms, WordPress File Upload, and Contact Form 7 as well.

How does attachmentAV for WordPress work?
- A user fills out a form and attaches a file.
- A user presses the Submit button.
- The attachmentAV plugin sends all attached files to the Virus and Malware Scan API.
- The attachmentAV plugin blocks infected files from being uploaded by throwing a data validation error.

How to get started with virus and malware scanning for Forminator?
Getting up and running takes just a few minutes.
- In the WordPress admin area, go to Plugins, search for
attachmentav. - Click Install Now.
- After activating the plugin, open its settings page and enter your API key.
- You can get a key by pressing Subscribe to attachmentAV directly from the settings screen and completing the subscription.
- Once the key is saved, every file uploaded through Forminator (as well as the Media Library) will be scanned automatically.
For the full walkthrough with screenshots of each step, see the attachmentAV for WordPress Setup Guide.
Protect your Forminator uploads today
Forminator makes it easy to build forms allowing users to submit files—but without virus scanning, every upload is a potential threat. attachmentAV for WordPress closes that gap by intercepting files at submission time and rejecting anything malicious before it reaches your systems. Setup takes minutes, runs in the background, and requires no ongoing maintenance.
Give attachmentAV for WordPress a try with a 14-day free trial and keep your site safe from malware.
Published on July 29, 2026 | Written by Andreas