CVE · Critical

CVE-2026-125055 — Unrestricted Upload of File with Dangerous Type

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-125055 Unrestricted Upload of File with Dangerous Type Unrestricted Upload of File with Dangerous Type Critical 9.8 < 1.0.2 1.0.2 2026-11-13 —

CVE-2026-125055 is a Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress plugin Chatterbug Forms – Fast, Flexible WordPress Form Builder (chatterbug-forms). Versions up to and including 1.0.2 are affected; no patched version is recorded. CVSS score: 9.8 (Critical). Published 2026-11-13.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.