Whitestudio

Easy Form Builder

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-13439

  • EPSS 0.4%
  • Veröffentlicht 21.07.2026 05:35:29
  • Zuletzt bearbeitet 21.07.2026 16:54:45

The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session ide...

8.5

CVE-2024-30535

  • EPSS 0.49%
  • Veröffentlicht 31.03.2024 19:15:46
  • Zuletzt bearbeitet 28.04.2026 19:24:09

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhiteStudio Easy Form Builder.This issue affects Easy Form Builder: from n/a through 3.7.4.

4.8

CVE-2022-3906

  • EPSS 0.39%
  • Veröffentlicht 12.12.2022 18:15:11
  • Zuletzt bearbeitet 22.04.2025 21:15:43

The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is dis...