Super Forms CVE-2026-14894 malicious file upload via super_submit_form

Arnold Chan@slaz

•updated Sep 4, 2026•0•0•3

This rule detects attempts to exploit a vulnerability in the WordPress Super Forms plugin (CVE-2026-14894). The rule monitors for malicious file upload requests containing embedded PHP code or attempts to bypass filename extensions for PHP files via the super_submit_form AJAX action.