Threats tagged 'ghsa-gchw-m9mp-vv65'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-5192The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path High7.52026-05-05GCVE DatabaseCVE-2026-5192 The Forminator Forms WordPress plugin up to version 1.52.1 contains a path traversal vulnerability via the 'upload-1[file][file_path]' parameter. This flaw allows unauthenticated attackers to read arbitrary files on the server if a publicly accessible form has a File Upload field with Save and Continue enabled and email notifications configured to attach uploaded files. Report on CVE-2026-5192 Vulnerability CWE-22 #ghsa-gchw-m9mp-vv65	GCVE Database	2026-05-05

Page 1 of 1