Read the docs

WebRehab

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

WebRehab records in CISA KEV

No WebRehab vulnerabilities are listed in CISA KEV.

Records

8 records

Priority MEDIUM 45

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit_form function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00309 Published 2026-10-08 No fix listed CWE-434
Priority MEDIUM 41

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00518 Published 2026-10-08 No fix listed CWE-434
Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebRehab Super Forms super-forms allows Path Traversal.This issue affects Super Forms: from n/a through 6.3.316.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-08-24 No fix listed CWE-22
Open these records in search →