Radar sectionsPlugins & themes
Check my site

WordPress plugin

Super Forms – Drag & Drop Form Builder security & vulnerabilities

super-forms— active installsLast vulnerability Oct 7, 2026

No known unpatched vulnerabilities in the latest version

All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

10Known vulnerabilities
  • Critical5
  • High4
  • Medium1
  • Low0
Vulnerabilities per year
2021: 1 vulnerability1212022: 1 vulnerability1222026: 8 vulnerabilities826

All Super Forms – Drag & Drop Form Builder vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Super Forms – Drag & Drop Form Builder: common questions

Does Super Forms – Drag & Drop Form Builder have known vulnerabilities?

Yes. VulnCrest Radar lists 10 known vulnerabilities in Super Forms – Drag & Drop Form Builder: 5 critical, 4 high, 1 medium. None are known to affect version null.

How do I check which version of Super Forms – Drag & Drop Form Builder I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Super Forms – Drag & Drop Form Builder vulnerability?

CVE-2026-17196, published Oct 7, 2026: Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute. Severity: High (CVSS 8.8).

Is any Super Forms – Drag & Drop Form Builder vulnerability listed in CISA KEV?

No. None of the known Super Forms – Drag & Drop Form Builder vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?