CVE-2026-118437 | BuddyForms Plugin up to 2.10.0 on WordPress Attachment file inclusion

October 31, 2026 Yanac

A vulnerability has been found in BuddyForms Plugin up to 2.10.0 on WordPress and classified as critical. This affects an unknown function of the component Attachment Handler. This manipulation causes file inclusion.

This vulnerability is handled as CVE-2026-118437. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More