Description
Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeCatcher | Quform | ≤ 2.23.0 | — |
Critical · 9.9
CVE-2026-56058
EUVD-2026-39712GHSA-86wc-v2qw-vmwq
WordPress Quform plugin <= 2.23.0 - Arbitrary File Upload vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack