CVE Intelligence

Super Forms vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Super Forms products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-28167 High · 7.5 CWE-22 Aug 24, 2026
WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal. This issue affects Super Forms: from n/a through 6.3.316.