Security
فارسی
All products

easy-form-builder

WordPress · Plugin
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Easy Form Builder 4.0.0 - 4.1.3 - Missing AuthorizationCVE-2026-85123 easy-form-builder WordPress Medium Fix reported
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-85122 easy-form-builder WordPress High Fix reported
Easy Form Builder by WhiteStudio – Drag & Drop Form Builder <= 4.0.12 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-59517 easy-form-builder WordPress High Fix reported
Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST EndpointCVE-2026-13439 easy-form-builder WordPress Critical Fix reported
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder <= 4.0.6 - Unauthenticated SQL InjectionCVE-2026-42747 easy-form-builder WordPress High Fix reported
Easy Form Builder <= 3.9.6 - Missing AuthorizationCVE-2026-22472 easy-form-builder WordPress Medium Fix reported
Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data ExposureCVE-2025-14067 easy-form-builder WordPress Medium Fix reported
Easy Form Builder <= 3.8.20 - Missing AuthorizationCVE-2025-67577 easy-form-builder WordPress Medium Fix reported
Easy Form Builder <= 3.8.15 - Unauthenticated SQL InjectionCVE-2025-54678 easy-form-builder WordPress High Fix reported
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-12112 easy-form-builder WordPress Medium Fix reported
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL InjectionCVE-2024-30535 easy-form-builder WordPress Critical Fix reported
Easy Form Builder <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2022-3906 easy-form-builder WordPress Medium Fix reported