Aug 182026 Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads Forminator CVE-2026–15748 lets unauthenticated attackers upload PHP files and reach RCE on sites using vulnerable form configurations.
