VYPR

Easy Form Builder by WhiteStudio

by WordPress

CVEs (1)

  • CVE-2026-13439CriJul 21, 2026
    risk 0.57cvss 9.8epss 0.00

    The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the…