Skip to content
OpenAdvisories

Vendor

hassantafreshi

8 known vulnerabilities.

Products

Easy Form Builder 5 Easy Form Builder by WhiteStudio – Drag & Drop Form Builder 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-13439

    Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint

    The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier (…

    hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder Web / CMS
  • Critical 9.3
    CVE-2026-42747

    WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through <= 4.0.6.

    hassantafreshi Easy Form Builder
  • Critical 9.3
    CVE-2025-54678

    WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through <= 3.8.15.

    hassantafreshi Easy Form Builder