Skip to contentHassantafreshi Easy Form Builder vulnerabilities
- hassantafreshi easy form builderWordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-595177.1 High
- hassantafreshi easy form builder by whitestudio – drag & drop form builderEasy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST EndpointCVE-2026-134399.8 Critical
- hassantafreshi easy form builderWordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerabilityCVE-2026-427479.3 Critical
- hassantafreshi easy form builder by whitestudio — drag & drop form builderEasy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data ExposureCVE-2025-140675.3 Medium
- hassantafreshi easy form builderWordPress Easy Form Builder plugin <= 3.9.6 - Broken Access Control vulnerabilityCVE-2026-224724.3 Medium
- hassantafreshi easy form builderWordPress Easy Form Builder plugin <= 3.8.20 - Broken Access Control vulnerabilityCVE-2025-675775.3 Medium
- hassantafreshi easy form builderWordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection VulnerabilityCVE-2025-546789.3 Critical
- hassantafreshi easy form builder by whitestudio — drag & drop form builderEasy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-121126.4 Medium
- hassantafreshi easy form builderWordPress Easy Form Builder plugin <= 3.7.4 - SQL Injection vulnerabilityCVE-2024-305358.5 High
- hassantafreshi easy form builderEasy Form Builder < 3.4.0 - Admin+ Stored XSSCVE-2022-39064.8 Medium
- hassantafreshi easy form builder, easy-form-builder-by-bitware project easy-form-builder-by-bitware +1 moreEasy Form Builder <= 1.0 - Authenticated Arbitrary File UploadCVE-2021-242248.8 High