Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin 

On July 9th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Super Forms, a WordPress plugin with an estimated 13,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution.
The post Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin appeared first on Wordfence.WordfenceRead More