VYPR

Easy Form Builder

by WhiteStudio

CVEs (1)

  • CVE-2026-13439Jul 21, 2026
    risk 0.00cvss epss 0.00

    The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the…