hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder

• CVE-2026-13439 Critical 9.8 Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint 0.7%
• CVE-2025-14067 Medium 5.3 Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure 0.3%
• CVE-2024-12112 Medium 6.4 Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%