Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Easy Form Builder by WhiteStudio 4.2.0 Clear all filters
TI-2026-58467 CVE-2026-85123 · GHSA-77hc-376p-97j9

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion

Priority LOW 30

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to create WordPress accou…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-09-18 Fixed in 4.2.0 CWE-284
TI-2026-58466 CVE-2026-85122 · GHSA-8g63-4vhx-3q8r

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion

Priority MEDIUM 41

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary conten…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00505 Published 2026-09-18 Fixed in 4.2.0 CWE-79