CVE-2026-17196 | WebRehab Super Forms Plugin up to 6.3.316 on WordPress upload_files extensions unrestricted upload

October 8, 2026 Yanac

A vulnerability labeled as critical has been found in WebRehab Super Forms Plugin up to 6.3.316 on WordPress. Affected by this vulnerability is the function upload_files. Such manipulation of the argument extensions leads to unrestricted upload.

This vulnerability is referenced as CVE-2026-17196. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More