CVE-2026-5461 | wpmudev Forminator Forms Plugin up to 1.55.0.2 on WordPress Upload Field Metadata previous_draft_id unrestricted upload (EUVD-2026-113708)

SecurityVulns
Yanac

A vulnerability was found in wpmudev Forminator Forms Plugin up to 1.55.0.2 on WordPress. It has been rated as critical. Impacted is an unknown function of the component Upload Field Metadata. The manipulation of the argument previous_draft_id leads to unrestricted upload.

This vulnerability is traded as CVE-2026-5461. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More