Advisories · Technology
hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder.
Every CVE that names hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint
- hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder
- Privilege escalation
- CVSS 5.3 Medium
Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
- hassantafreshi Easy Form Builder by WhiteStudio — Drag & Drop Form Builder
- Broken access control
- CVSS 6.4 Medium
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
- hassantafreshi Easy Form Builder by WhiteStudio — Drag & Drop Form Builder
- Cross-site scripting (XSS)