Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CVE-2026-15748: Critical Forminator WordPress Flaw Enables Unauthenticated RCE
Excerpt
A critical security vulnerability in the popular Forminator Forms plugin for WordPress can allow unauthenticated attackers to upload executable PHP files and potentially take complete control of vulnerable websites. Tracked as CVE-2026-15748, the arbitrary file upload flaw carries a CVSS score of 9.8 and affects Forminator versions up to and including 1.56.1. Forminator is a widely deployed drag-and-drop form builder used for contact forms, payment forms, polls, quizzes, and…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-19478 | High | Score 68/100 | First seen |
| CVE | CVE-2026-15748 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-14266 | High | Score 79/100 | First seen |
IOC Relationship Graph
Building graph…