Super Forms vulnerabilities
Published CVEs affecting Super Forms products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-28167
High · 7.5
CWE-22 Aug 24, 2026
WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal.
This issue affects Super Forms: from n/a through 6.3.316.