CVE-2026-17196 - Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute
CVE ID :CVE-2026-17196 Published : Oct. 8, 2026, 4:28 a.m. | 1 hour ago Description :The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to...