Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the 'upload-1[file][file_path]' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Successful exploitation requires a publicly accessible form with a File Upload field where Save and Continue is enabled in that form's Behavior settings and the Save and Continue email notification is configured to attach uploaded files in Email Notifications.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-5192 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 vi… https://www.cve.org/CVERecord?id=CVE-2026-5192
Post summary
CVE-2026-5192 is disclosed as a Path Traversal vulnerability affecting the Forminator WordPress plugin versions up to 1.52.1, with no PoC, exploit or patch information provided.
🚨*CVE* CVE-2026-5192 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 vi… https://www.cve.org/CVERecord?id=CVE-2026-5192 ----- Traducción: CVE-2026-5192 El … http://infoflow.cloud`
Post summary
CVE-2026-5192 alerts that the Forminator Forms WordPress plugin (up to 1.52.1) suffers a path traversal vulnerability. The announcement provides basic technical details and references the official CVE record.