Read the docs

Easy Registration Forms

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Easy Registration Forms records in CISA KEV

No Easy Registration Forms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy Registration Forms 3 records MEDIUM

Records

3 records

TI-2021-16720 CVE-2021-39353 · GHSA-9fhm-63v7-pp72

Easy Registration Forms <= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting

Priority MEDIUM 41

The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajax_add_form function found in the ~/includes/class-form.php file which made it possible f…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00721 Published 2021-11-19 No fix listed CWE-352
TI-2023-04722 CVE-2023-5134 · GHSA-vh9r-prpc-323j

Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode

Priority LOW 21

The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erforms_user_meta' shortcode in versions up to, and including, 2.1.1 due to insufficient controls on the information retrievable…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00515 Published 2023-09-23 No fix listed CWE-200
Open these records in search →