Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:super_forms_drag_drop_form_builder:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in Super Forms WordPress Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-15989) in the Super Forms WordPress plugin allows attackers to register administrative accounts via registration form injection.

PoC Super Forms – Drag & Drop Form Builder web-application wordpress privilege-escalation cve-2026-15989
1r 1t 1c updated