Easy Form Builder by WhiteStudio — Drag & Drop Form Builder vulnerabilities
1 known vulnerability in Easy Form Builder by WhiteStudio — Drag & Drop Form Builder from Hassantafreshi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Easy Form Builder by WhiteStudio – Drag & Drop…: Improper Privilege Management
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('