Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-15989

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in Super Forms WordPress Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-15989) in the Super Forms WordPress plugin allows attackers to register administrative accounts via registration form injection.

PoC Super Forms – Drag & Drop Form Builder web-application wordpress privilege-escalation cve-2026-15989
1r 1t 1c updated