CVE-2026-125055

The Chatterbug Forms WordPress plugin is vulnerable to Arbitrary File Upload in all versions up to and including 1.0.2 . The root cause is a lack of server-side file extension validation within the cbforms_check_form_submissions() function. When no field restrictions are configured, the allowed-t...

WordPress Chatterbug Forms – Fast, Flexible WordPress Form Builder plugin <= 1.0.2 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by samathakeeling in WordPress Plugin Chatterbug Forms – Fast, Flexible WordPress Form Builder versions = 1.0.2...