Skip to content
OpenAdvisories

Vendor

WebRehab

8 known vulnerabilities.

Products

Super Forms – Drag & Drop Form Builder 7 Super Forms 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15989 Public exploit

    Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter

    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before_email_success_msg() function whitelisting the client-submi…

    WebRehab Super Forms – Drag & Drop Form Builder Web / CMS
  • Critical 9.8
    CVE-2026-14894 Public exploit Scanner template

    Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation and the absence of any capability ch…

    WebRehab Super Forms – Drag & Drop Form Builder Web / CMS