CVE-2021-39353

The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajaxaddform function found in the /includes/class-form.php file which made it possible for attackers to inject arbitrary web scripts in versions up to, and including...

PT-2021-22559

Name of the Vulnerable Software and Affected Versions: Easy Registration Forms WordPress plugin versions up to, and including 2.1.1 Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation via the ajax add form function found in the /includes/class-form.php...