Webrehab Super Forms vulnerabilities
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter 9.1 Critical
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute 8.8 High
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter 9.1 Critical
- webrehab super forms – drag & drop form builder Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login 8.8 High
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter 8.1 High
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter 9.8 Critical
- super forms forms, webrehab super forms +1 more WordPress Super Forms plugin <= 6.3.316 - Arbitrary File Download vulnerability 7.5 High
- webrehab super forms – drag & drop form builder Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value) 9.8 Critical