WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read vulnerability

Unauthenticated Path Traversal to Arbitrary File Read vulnerability discovered by afei in WordPress Plugin Super Forms versions = 6.3.316...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

WordPress super-forms Plugin Directory Listing Detection

Searches for sensitive directories present in the super-forms plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the super-forms plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Super Forms Bundle premium plugin <= 4.9.700 - Arbitrary File Upload leading to Remote Code Execution (RCE) vulnerability

Arbitrary File Upload leading to Remote Code Execution RCE vulnerability found by ABDO10 in WordPress Super Forms Bundle premium plugin versions = 4.9.700. Solution Update the WordPress Super Forms Bundle premium plugin to the latest available version at least 4.9.703...