CVE-2026-87796 | sh1zen Multi Uploader for Gravity Forms Plugin up to 1.1.9 on WordPress move_file unrestricted upload (EUVD-2026-81335)

September 17, 2026 Yanac

A vulnerability classified as critical has been found in sh1zen Multi Uploader for Gravity Forms Plugin up to 1.1.9 on WordPress. Affected by this vulnerability is the function move_file. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2026-87796. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More