Unrated severityNVD Advisory· Published Jul 13, 2026· Updated Jul 13, 2026
WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability
CVE-2026-57815
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1.55.0.2.
Affected products
2<=1.55.0.2+ 1 more
- (no CPE)range: <=1.55.0.2
- (no CPE)range: <=1.55.0.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.