supsystic.com — Vulnerabilities & Security Advisories 3

Supsystic develops WordPress plugins for creating galleries, forms, and tables, with three publicly disclosed CVEs. Historically, vulnerabilities have included stored cross-site scripting (XSS) in form builders and remote code execution (RCE) in table components due to insufficient input validation and improper file handling. Privilege escalation risks have been identified in access control mechanisms. While no major public security incidents have been documented, the pattern of vulnerabilities suggests consistent issues with sanitization and permission management, requiring users to maintain updated versions and implement additional security controls to mitigate potential risks.