CVE-2026-120522 | FluentWiz Cloud Storage Manager for Fluent Forms Plugin up to 1.2.0 on WordPress Google Drive Download downloadFile name path traversal

A vulnerability identified as critical has been detected in FluentWiz Cloud Storage Manager for Fluent Forms Plugin up to 1.2.0 on WordPress. This affects the function downloadFile of the component Google Drive Download. Performing a manipulation of the argument Name results in path traversal.

This vulnerability is cataloged as CVE-2026-120522. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More