Extension WordPress

Vulnérabilités Super Forms – Drag & Drop Form Builder

Cette page rassemble les failles publiées pour Super Forms – Drag & Drop Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
2Critiques
3Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Super Forms – Drag & Drop Form Builder

3 fiches

CVE-2026-14894 Critique · 9,8
Super Forms – Drag & Drop Form Builder

Super Forms <= 6.3.313 – Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation…

Versions affectées

*-6.3.313

Correctif

6.3.314

Publication

09/07/2026

CVE-2022-0402 Moyenne · 6,1
Super Forms – Drag & Drop Form Builder

Super Forms – Drag & Drop Form Builder WordPress <= 6.0.3 – Reflected Cross-Site Scripting

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'bob_czy_panstwa_sprawa_zostala_rozwiazana' parameter in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output escaping.…

Versions affectées

*-6.0.3

Correctif

6.0.4

Publication

21/01/2022

Vulnérabilité Critique · 9,8
Super Forms – Drag & Drop Form Builder

Super Forms – Drag & Drop Form Builder <= 4.9.700 – Arbitrary File Upload

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the super-forms/uploads/php/directory in versions up to, and including, 4.9.702. This makes it possible…

Versions affectées

*-4.9.700

Correctif

4.9.800

Publication

28/01/2021

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités