Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Easy Form Builder
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-85122 | 1 Wordpress-extensions | 1 Easy Form Builder | 2026-09-29 | 8.8 High |
| The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS. | ||||
| CVE-2026-85123 | 1 Wordpress-extensions | 1 Easy Form Builder | 2026-09-29 | 5.3 Medium |
| The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to create WordPress accounts on a site whose owner has disabled registration. | ||||
Page 1 of 1.