Filtered by tag: forminator forms × Clear
600,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in Forminator Forms WordPress Plugin
Matched: WordPress
A critical unauthenticated arbitrary file upload vulnerability was discovered in the Forminator Forms WordPress plugin, affecting over 600,000 active installations. The flaw, reported to Wordfence on July 14, 2026, allows attackers to upload files without authentication, posing significant security risks to affected sites. Users are advised to update the plugin promptly.