CVE-2026-15989

CVE-2026-15989 — Super Forms ≤ 6.3.316 — Unauthenticated Privilege Escalation PoC Super Forms – Drag & Drop Form Builder WordPress ≤ 6.3.316 — unauthenticated privilege escalation via the role parameter of the premium Register & Login add-on. 📋 Vulnerability Overview Attribute| Details ---|--- CV...

Exploit for CVE-2026-15989

CVE-2026-15989 — Super Forms ≤ 6.3.316 — Unauthenticated Privi...

CVE-2026-15897

The Super Forms – Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316 ) is vulnerable to Privilege Escalation . The flaw exists in the Register & Login add-on's before_email_success_msg() function, which fails to perform ownership or capability checks when proc...

EUVD-2026-91176

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2026-15897: Improper Privilege Management

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

PT-2026-104078

Name of the Vulnerable Software and Affected Versions Super Forms – Drag & Drop Form Builder versions prior to 6.3.317 Description An issue exists in the Register & Login add-on where the before email success msg function, during the register login action='update' flow, trusts a user-supplied use...

CVE-2026-15989

The Super Forms – Drag & Drop Form Builder plugin for WordPress (versions up to and including 6.3.316 ) is vulnerable to unauthenticated privilege escalation . The root cause lies in the Register & Login add-on's before_email_success_msg() function, which whitelists the client-submitted role key ...

CVE-2026-15989 Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function whitelisting the client-submitted 'role' key and copying it into the...

CVE-2026-15989 Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function whitelisting the client-submitted 'role' key and copying it into the...

EUVD-2026-90547

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function whitelisting the client-submitted 'role' key and copying it into the...

PT-2026-103714

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before email success msg function whitelisting the client-submitted 'role' key and copying it into the...

CVE-2018-15876

An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished...

Eleix Openhacker account registration and login component SQL injection vulnerability

Eleix Openhacker is an open source code hosting system. account registration and login component is one of the account registration and login component. A SQL injection vulnerability exists in the account registration and login component in Eleix Openhacker version 0.1.47. A remote attacker can...

Huawei network disk without register log in, no need to install plug-ins directly download the attachment-vulnerability warning-the black bar safety net

Brief description: Prevent peeping···please see the detailed description Detailed description: Is bypass download!··· For details, see vulnerability proof Vulnerability proof: Perhaps someone has already found out. But see the clouds network no one submitted I made a turn ! ! ! ! ! ! repair...

am4ss 1.2 <= three xss-vulnerability warning-the black bar safety net

Title : am4ss 1.2 = Multiple Vulnerabilities Author: s3n4t00r Affected versions : all version XSS storage type 1 1 - Register 2 - Login here http://localhost/am4ss/orderdev.php?step=2 3 - Create a Ticket and add your code html or js 4 - Show Tickets http://www.xxx.com/exp/am4ss/tickets.php XSSXSS...