Security
فارسی
All products

super-forms

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Unauthenticated Arbitrary File ReadCVE-2026-28167 super-forms WordPress High Fix reported
Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' ParameterCVE-2026-17609 super-forms WordPress Critical Fix reported
Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element AttributeCVE-2026-17196 super-forms WordPress High Fix reported
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path ParameterCVE-2026-15896 super-forms WordPress Critical Fix reported
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & LoginCVE-2026-15897 super-forms WordPress High Fix reported
Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' ParameterCVE-2026-15983 super-forms WordPress High Fix reported
Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' ParameterCVE-2026-15989 super-forms WordPress Critical Fix reported
Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)CVE-2026-14894 super-forms WordPress Critical Fix reported
Super Forms - Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site ScriptingCVE-2022-0402 super-forms WordPress Medium Fix reported
Super Forms – Drag & Drop Form Builder <= 4.9.700 - Arbitrary File Upload super-forms WordPress Critical Fix reported