VYPR

Super Forms

by WordPress

CVEs (1)

  • CVE-2026-14894CriJul 10, 2026
    risk 0.00cvss 9.8epss 0.03

    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation and the absence of any capability check on the…