CVE-2025-11889 | AIO Forms Plugin up to 1.3.15 on WordPress ZIP Import unrestricted upload

SecurityVulns
Yanac

A vulnerability was found in AIO Forms Plugin up to 1.3.15 on WordPress and classified as critical. The impacted element is an unknown function of the component ZIP Import. Such manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-11889. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More