Critical Forminator WordPress Flaw Allows Unauthenticated RCE via Malicious PHP Uploads
A critical vulnerability has been disclosed in the Forminator Forms WordPress plugin, which has over 600,000 active installations. Tracked as CVE-2026-15748 and…
Tag: Forminator
CVE-2026-15748: Critical Arbitrary File Upload in Forminator WordPress Plugin
CVE-2026-15748 is a critical vulnerability in the Forminator WordPress plugin (versions up to and including 1.56.1) that allows unauthenticated attackers to upload…
Forminator: WordPress Form Builder Plugin
Forminator is a popular WordPress plugin with over 600,000 active installations, used for creating forms, quizzes, and polls. A critical arbitrary file…