CVE-2026-15897 - Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login
CVE ID :CVE-2026-15897 Published : 2. Oktober 2026 06:16 | 1 Stunde, 3 Minuten ago Description :The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's...