Hassantafreshi vulnerabilities
We track 3 vulnerabilities in Hassantafreshi products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2026.
Latest Hassantafreshi vulnerabilities
- 9.8 Critical severity
Easy Form Builder by WhiteStudio – Drag & Drop…: Improper Privilege Management
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('
- 9.3 Critical severity
Easy Form Builder: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through <= 4.0.6.
- 9.3 Critical severity
Easy Form Builder: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through <= 3.8.15.