Super Forms super_submit_form base64 PHP payload upload (CVE-2026-14894)

Arnold Chan@slaz

•updated Sep 4, 2026•2•0•5

Detects an attempt to exploit CVE-2026-14894 within the Super Forms plugin by sending a crafted HTTP POST request to admin-ajax.php. The attack attempts to upload an obfuscated PHP web shell disguised as a base64-encoded GIF image.