https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:58:02 +0000 https://cve.radiocsirt.org/vuln/cve-2026-5192 <p><strong>Affected:</strong> wpmudev Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder</p> <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the &#39;upload-1[file][file_path]&#39; parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Successful exploitation requires a publicly accessible form with a File Upload field where Save and Continue is enabled in that form&#39;s Behavior settings and the Save and Continue email notification is configured to attach uploaded files in Email Notifications.</p> <p><strong>Affected:</strong> wpmudev Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder</p> <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the &#39;upload-1[file][file_path]&#39; parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Successful exploitation requires a publicly accessible form with a File Upload field where Save and Continue is enabled in that form&#39;s Behavior settings and the Save and Continue email notification is configured to attach uploaded files in Email Notifications.</p> https://cve.radiocsirt.org/vuln/cve-2026-5192