Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-28167

WordPress Super Forms plugin <= 6.3.316 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebRehab Super Forms super-forms allows Path Traversal.This issue affects Super Forms: from n/a through 6.3.316.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Super-forms Wordpress
Products
Super Forms Wordpress
CVE-2022-0402

Superforms < 6.0.4 - Reflected Cross-Site Scripting

The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zostala_rozwiazana parameter before outputting it back in an attribute via the super_language_switcher AJAX action, leading to a Reflected Cross-Site Scripting. The action is also lacking CSRF, making the attack easier to perform against any user.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Super-forms
Products
Super Forms