Lucene search
+L

161 matches found

CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

WordPress plugin Easy Form Builder SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.3CVSS5.9AI score0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•0 views

CVE-2026-42747: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through = 4.0.6...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 3:18 p.m.•14 views

CVE-2026-32332

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/13 9:31 p.m.•10 views

EUVD-2026-11808

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.8AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/13 7:54 p.m.•12 views

CVE-2026-32332

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.3CVSS0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 11:41 a.m.•37 views

CVE-2026-32332 WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.3CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 11:41 a.m.•6 views

CVE-2026-32332 WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.8AI score0.00261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:41 a.m.•8 views

CVE-2026-32332

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.8AI score0.00261EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/13 11:41 a.m.•24 views

CVE-2026-32332

CVE-2026-32332 affects the WordPress WordPress Easy Form plugin up to version 2.7.9. The issue is a Missing Authorization vulnerability stemming from incorrectly configured access control in Easy Form, potentially allowing unauthorized access to certain features due to insufficient authorization ...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•18 views

PT-2026-25180

CVE-2026-32332 Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy For… https://t.co/cdtVpSp78a...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•20 views

WordPress plugin Easy Form 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•1 views

CVE-2026-32332: Missing Authorization

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.9...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/15 7:10 a.m.•27 views

CVE-2025-14067

The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve...

5.3CVSS5.5AI score0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/14 3:25 a.m.•43 views

CVE-2025-14067 Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure

The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve...

5.3CVSS0.0024EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/14 3:25 a.m.•6 views

CVE-2025-14067 Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure

The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve...

5.3CVSS5.5AI score0.0024EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/14 12:00 a.m.•1 views

CVE-2025-14067: Missing Authorization

The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve...

5.3CVSS5.7AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/14 12:00 a.m.•20 views

WordPress plugin Easy Form Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/14 12:00 a.m.•17 views

PT-2026-8046

The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve...

5.3CVSS5.5AI score0.0024EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/02/13 9:56 p.m.•20 views

WordPress Easy Form Builder plugin <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Form Response Data Exposure vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin Easy Form Builder versions = 3.9.3...

5.3CVSS5.5AI score0.0024EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•17 views

CVE-2026-22472

Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through = 3.9.6...

4.3CVSS5.4AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder