Tag

Cve-2026-5581

1 brief RSS

Unauthenticated Arbitrary Media Deletion in Multi Uploader for Gravity Forms

The Multi Uploader for Gravity Forms WordPress plugin is vulnerable to unauthenticated arbitrary media deletion via missing capability checks and exposed CSRF nonces.

Multi Uploader for Gravity Forms wordpress cve-2026-5581 arbitrary-file-deletion web-application

1r 1t 1c 1d ago