Easy Registration Forms Security Vulnerabilities and Issues — Easy Registration Forms CVE List

EasyregistrationformsEasy Registration Forms

3 matches found

CVE•added 2023/09/23 7:34 a.m.•52 views

CVE-2023-5134

CVE-2023-5134 affects the WordPress plugin “Easy Registration Forms”. The vulnerability stems from insufficient access controls on the shortcodes, specifically the erforms_user_meta shortcode. Versions up to and including 2.1.1 are susceptible. With subscriber-level capabilities or higher, an aut...

4.3CVSS4.5AI score0.00441EPSS

CVE•added 2021/11/19 3:34 p.m.•46 views

CVE-2021-39353

The CVE-2021-39353 entry concerns the WordPress plugin Easy Registration Forms (versions up to 2.1.1). The vulnerability is Cross-Site Request Forgery caused by missing nonce validation in the ajax_add_form function within includes/class-form.php, enabling an attacker to inject arbitrary web scri...

8.8CVSS8.7AI score0.00698EPSS

CVE•added 2020/11/04 4:59 p.m.•44 views

CVE-2020-22275

The CVE describes a CSV injection in WordPress Easy Registration Forms (ER Forms) plugin v2.0.6, where attacker-supplied entries with malicious CSV commands are not sanitized, enabling code execution when an admin exports CSV data. Affected component: ER Forms plugin for WordPress; root cause: in...

8.8CVSS8.6AI score0.02144EPSS