World Wires · story 93939 · official · 1 source(s)

Critical CVE-2026-118235 in WordPress SimpleForm plugin

The SimpleForm plugin for WordPress up to version 3.10.2 is vulnerable to arbitrary file upload via missing validation in handle_upload.

Open in the desk

Coverage

• Critical CVE-2026-118235 in WordPress SimpleForm plugin NVD: critical CVEs · tier A · clear net · 2026-10-31 09:16 UTC

What this site indexes