Plugin icon

Easy Form Builder by WhiteStudio — Drag & Drop Form Builder

easy-form-builder

Vulnerabilities:

8

Last Updated:

June 27, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-05-28
Title
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder < 4.0.7 - Unauthenticated SQL Injection
Fixed in
Fixed in 4.0.7
CVSS
7.5 (high)
Published
2026-02-13
Title
Easy Form Builder < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
Fixed in
Fixed in 3.9.4
CVSS
5.3 (medium)
Published
2026-01-06
Title
Easy Form Builder < 4.0.0 - Missing Authorization
Fixed in
Fixed in 4.0.0
CVSS
4.3 (medium)
Published
2025-12-15
Title
Easy Form Builder < 3.8.21 - Missing Authorization
Fixed in
Fixed in 3.8.21
CVSS
5.3 (medium)
Published
2025-08-07
Title
Easy Form Builder < 3.8.16 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.8.16
CVSS
7.5 (high)
Published
2025-01-07
Title
Easy Form Builder < 3.8.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.8.9
CVSS
6.4 (medium)
Published
2024-03-29
Title
Easy Form Builder < 3.7.5 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 3.7.5
CVSS
9.9 (critical)
Published
2022-11-16
Title
Easy Form Builder < 3.4.0 - Admin+ Stored XSS
Fixed in
Fixed in 3.4.0
CVSS
3.4 (low)