CVE-2026-5192 | wpmudev Forminator Forms Plugin up to 1.52.1 on WordPress File Upload file_path path traversal

A vulnerability classified as critical has been found in wpmudev Forminator Forms Plugin up to 1.52.1 on WordPress. The impacted element is the function file_path of the component File Upload. The manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-5192. Remote exploitation of the attack is possible. No exploit is available.