Super Forms CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Super Forms CVE published 2026-08-24

CVE-2026-28167

The CVE-2026-28167 vulnerability affects the WordPress Super Forms plugin, allowing for arbitrary file downloads due to improper limitation of a pathname to a restricted directory. This issue has a CVSS score of 7.5 and is considered high severity. The vulnerability is a Path Traversal issue, which can lead to potential arbitrary file downloads and possible exploitation attempts. Defenders should assess e [truncated]