[ Vendor · 6 CVEs ]

WebRehab

CVEs affecting WebRehab published in the last 30 days, plus any WebRehab CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-17196 8 Oct 2026 CVSS 8.8 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including…
CVE-2026-17609 8 Oct 2026 CVSS 9.1 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including…
CVE-2026-15897 2 Oct 2026 CVSS 8.8 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316…
CVE-2026-15896 2 Oct 2026 CVSS 9.1 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316…
CVE-2026-15983 1 Oct 2026 CVSS 8.1 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and…
CVE-2026-15989 1 Oct 2026 CVSS 9.8 WebRehab Super Forms – Drag & Drop Form BuilderThe Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316…