The Hacker News

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security researcher who goes by the online alias "

作者 The Hacker News

1 分钟阅读
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

有活动行业的新闻要分享吗?

提交新闻稿或信息,触达数千名活动行业专业人士。

联系我们→

更多Cybersecurity, Cryptography & Digital Trust相关内容

相关洞察