Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

hassantafreshi vulnerabilities

8 published CVEs name hassantafreshi among the affected products.

Newest CVEs

  • CVE-2026-59517

    WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability

    hassantafreshi · Easy Form Builder

    High7.1
  • CVE-2026-13439

    Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint

    hassantafreshi · Easy Form Builder by WhiteStudio – Drag & Drop Form Builder

    Critical9.8
  • CVE-2026-42747

    WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability

    hassantafreshi · Easy Form Builder

    Critical9.3
  • CVE-2025-14067

    Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure

    hassantafreshi · Easy Form Builder by WhiteStudio — Drag & Drop Form Builder

    Medium5.3
  • CVE-2026-22472

    WordPress Easy Form Builder plugin <= 3.9.6 - Broken Access Control vulnerability

    hassantafreshi · Easy Form Builder

    Medium4.3
  • CVE-2025-67577

    WordPress Easy Form Builder plugin <= 3.8.20 - Broken Access Control vulnerability

    hassantafreshi · Easy Form Builder

    Medium5.3
  • CVE-2025-54678

    WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability

    hassantafreshi · Easy Form Builder

    Critical9.3
  • CVE-2024-12112

    Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    hassantafreshi · Easy Form Builder by WhiteStudio — Drag & Drop Form Builder

    Medium6.4