2026年8月17日 14:22 ET 发布 · 更新于 3 个月前 · 1 个来源
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
The Hacker News
·
原始报道
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security researcher who goes by the online alias "
原文