Hassantafreshi

6 CVEs across 3 Hassantafreshi products. Browse Hassantafreshi vulnerabilities, severities, and proof-of-concept exploits.

Hassantafreshi products with known CVEs

ProductCVEs
Easy Form Builder5
Easy Form Builder By Whitestudio — Drag & Drop Form Builder2
Easy Form Builder By Whitestudio – Drag & Drop Form Builder1
Hassantafreshi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-59517High7.12026-07-23Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.
CVE-2026-13439Critical9.82026-07-21The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and includi…
CVE-2026-42747Critical9.32026-05-27Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows…
CVE-2025-14067Medium5.32026-02-14The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versi…
CVE-2026-22472Medium4.32026-01-22Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2025-67577Medium5.32025-12-09Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2025-54678Critical9.32025-08-14Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows…
CVE-2024-12112Medium6.42025-01-08The Easy Form Builder – WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to S…