Advisories · Technology

hassantafreshi Easy Form Builder.

Every CVE that names hassantafreshi Easy Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59517 CVE record

CVSS 7.1 High

WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
- hassantafreshi Easy Form Builder
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-42747 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability
- hassantafreshi Easy Form Builder
- SQL injection
Not analysed yet 27 May 2026
CVE-2026-22472 CVE record

CVSS 4.3 Medium

WordPress Easy Form Builder plugin <= 3.9.6 - Broken Access Control vulnerability
- hassantafreshi Easy Form Builder
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-67577 CVE record

CVSS 5.3 Medium

WordPress Easy Form Builder plugin <= 3.8.20 - Broken Access Control vulnerability
- hassantafreshi Easy Form Builder
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-54678 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability
- hassantafreshi Easy Form Builder
- SQL injection
Not analysed yet 14 Aug 2025