Critical Forminator WordPress Flaw Allows Unauthenticated RCE via Malicious PHP Uploads
A critical vulnerability has been disclosed in the Forminator Forms WordPress plugin, which has over 600,000 active installations. Tracked as CVE-2026-15748 and…
Tag: arbitrary file upload
CVE-2026-15748: Critical Arbitrary File Upload in Forminator WordPress Plugin
CVE-2026-15748 is a critical vulnerability in the Forminator WordPress plugin (versions up to and including 1.56.1) that allows unauthenticated attackers to upload…
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…