Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

CVE-2026-15748, a critical arbitrary file upload in the Forminator Forms WordPress plugin, could be exploited for code execution.