A vulnerability classified as critical has been found in wpmudev Forminator Forms Plugin up to 1.52.1 on WordPress. The impacted element is the function file_path of the component File Upload . The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-5192 . Remote exploitation of the attack is possible. No exploit is available.