CVE-2026-15748 | WPMU DEV Forminator Forms Plugin up to 1.56.1 on WordPress handle_file_upload unrestricted upload

August 18, 2026 Yanac

A vulnerability marked as critical has been reported in WPMU DEV Forminator Forms Plugin up to 1.56.1 on WordPress. This impacts the function handle_file_upload. Performing a manipulation results in unrestricted upload.

This vulnerability is identified as CVE-2026-15748. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More