Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2026-15748

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-15748.

Vendor
WPMU DEV
Product
Forminator Forms plugin for WordPress
Affected versions
through 1.56.1; fixed in 1.56.2
Coverage Span
2026-08-18
Reports
1 related reports

Associated Reports & Timeline

1.
CVE-2026-15748 — WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload
aretiq.ai | research | | original ↗ | #ai-security | #rce | #wordpress | #authentication
Aretiq on CVE-2026-15748: Forminator Forms (600k+ installs) lets unauthenticated attackers bypass its file-extension blocklist and upload PHP files for remote code execution; fixed in 1.56.2.
Why it matters: This research provides technical context that security teams can use for monitoring and validation.