W
Vendor security profile
WebRehab
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical3
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS9.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
6
CVE KEV
CVE severity distribution
6toplam CVE
Critical3 (50%)
High3 (50%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
9.1
CVE-2026-17609
Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter
W
Patch status unknownEPSS %0
8.8
CVE-2026-17196
Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute
W
Patch status unknownEPSS %1
9.1
CVE-2026-15896
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter
W
Patch status unknownEPSS %1
8.8
CVE-2026-15897
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login
W
Patch status unknownEPSS %0
8.1
CVE-2026-15983
Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion via 'subdir' / 'path' Parameter
W
Patch status unknownEPSS %1
9.8
CVE-2026-15989
Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter
W
Patch status unknownEPSS %0