Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-48866

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-48866.

Coverage Span: 2026-06-01
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-48866 — WordPress Gravity Forms Plugin File Upload Path Traversal Arbitrary File Deletion

CVE-2026-48866: unauthenticated attackers can poison Gravity Forms entries with ../ sequences that delete arbitrary server files, including wp-config.php, when an admin removes the entry.