Forminator Forms (CVE-2026-15748): Unauthenticated RCE via Forged Upload Settings in Select Fields 1. Basic Information Article Title : 600,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in Forminator Forms WordPress Plugin Publisher : Wordfence Intelligence Publication Date : 2026-08-17 Severity : High Original Source : Wordfence Related Sources : SecurityWeek Related Malware / Attack Groups : None / Unidentified CVE &a...