CVE-2026-17609 - Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter
CVE ID :CVE-2026-17609 Published : Oct. 8, 2026, 4:28 a.m. | 1 hour ago Description :The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit_form function. This is due to...