Skip to content
Threat Feed
Subscribe

Product

Multi Uploader for Gravity Forms (<= 1.1.8)

1 brief RSS
high advisory

Unauthenticated Arbitrary Media Deletion in Multi Uploader for Gravity Forms

The Multi Uploader for Gravity Forms WordPress plugin is vulnerable to unauthenticated arbitrary media deletion via missing capability checks and exposed CSRF nonces.

Multi Uploader for Gravity Forms wordpress cve-2026-5581 arbitrary-file-deletion web-application
1r 1t 1c