Read the docs

Easy-form-builder-by-bitware Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Easy-form-builder-by-bitware Project records in CISA KEV

No Easy-form-builder-by-bitware Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy-form-builder-by-bitware 1 record MEDIUM

Records

1 record

TI-2021-06516 CVE-2021-24224 · GHSA-hv6f-36rr-r48j

Easy Form Builder <= 1.0 - Authenticated Arbitrary File Upload

Priority MEDIUM 42

The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01906 Published 2021-04-12 No fix listed CWE-434
Open these records in search →