Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-42747 EUVD-2026-32196GHSA-8rj8-4rfm-p4j9

WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability

Published May 27, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through <= 4.0.6.

Affected products

VendorProductAffectedFixed
hassantafreshi Easy Form Builder ≤ 4.0.6 —

References