wp_libre_form vulnerabilities

CVEs whose affected-version data names the wp_libre_form package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118423Critical· 10.0PoC

yesterday

WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote…

▾ AbyssalEPSS 0.57%via CVEORG