https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:56:04 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15896 <p>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The optional &#39;file_upload_auth&#39; setting defaults to empty, meaning no authentication is required in the default configuration; enabling this setting mitigates unauthenticated exploitation but does not remediate the path traversal itself. Exploitation on Linux requires a real 13-digit timestamp directory to exist, whereas on Windows the traversal works with any hardcoded 13-digit prefix. However, the plugin&#39;s file upload response returns the name of the created directory, which means the vulnerability is exploitable as long as file upload is enabled on the form.</p> <p>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The optional &#39;file_upload_auth&#39; setting defaults to empty, meaning no authentication is required in the default configuration; enabling this setting mitigates unauthenticated exploitation but does not remediate the path traversal itself. Exploitation on Linux requires a real 13-digit timestamp directory to exist, whereas on Windows the traversal works with any hardcoded 13-digit prefix. However, the plugin&#39;s file upload response returns the name of the created directory, which means the vulnerability is exploitable as long as file upload is enabled on the form.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-15896 https://vulnerability.circl.lu/vuln/ghsa-r39q-9952-j46j <p>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The optional &#39;file_upload_auth&#39; setting defaults to empty, meaning no authentication is required in the default configuration; enabling this setting mitigates unauthenticated exploitation but does not remediate the path traversal itself. Exploitation on Linux requires a real 13-digit timestamp directory to exist, whereas on Windows the traversal works with any hardcoded 13-digit prefix. However, the plugin&#39;s file upload response returns the name of the created directory, which means the vulnerability is exploitable as long as file upload is enabled on the form.</p> <p>The Super Forms – Drag &amp; Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The optional &#39;file_upload_auth&#39; setting defaults to empty, meaning no authentication is required in the default configuration; enabling this setting mitigates unauthenticated exploitation but does not remediate the path traversal itself. Exploitation on Linux requires a real 13-digit timestamp directory to exist, whereas on Windows the traversal works with any hardcoded 13-digit prefix. However, the plugin&#39;s file upload response returns the name of the created directory, which means the vulnerability is exploitable as long as file upload is enabled on the form.</p> https://vulnerability.circl.lu/vuln/ghsa-r39q-9952-j46j