low
advisory
Bold Grid weForms: Path Traversal (CVE-2026-111833)
The Bold Grid weForms plugin is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability.
CVE search metadata
CVE search record: CVE-2026-111833. Severity: high. CVSS: 7.5. KEV: no. Product: weForms (n/a through 1.6.28). Brief: Bold Grid weForms: Path Traversal (CVE-2026-111833). Brief link: https://feed.craftedsignal.io/briefs/2026-10-weforms-path-traversal/
Triage facts
Revision 1- Applicability
- weForms (n/a through 1.6.28)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Oct 21, 16:08 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-111833 identifies a Path Traversal vulnerability in Bold Grid weForms, affecting versions from n/a through 1.6.28.