High
CVE-2026-85122
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 17
Reset filters
Medium
CVE-2026-85123
Easy Form Builder 4.0.0 - 4.1.3 - Missing Authorization
High
CVE-2026-59517
Easy Form Builder by WhiteStudio – Drag & Drop Form Builder <= 4.0.12 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-13439
Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint
High
CVE-2026-42747
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder <= 4.0.6 - Unauthenticated SQL Injection
Medium
CVE-2026-9278
Form Builder CP <= 1.2.46 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-14067
Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
Medium
CVE-2026-22472
Easy Form Builder <= 3.9.6 - Missing Authorization
Medium
CVE-2025-67577
Easy Form Builder <= 3.8.20 - Missing Authorization
High
CVE-2025-54678
Easy Form Builder <= 3.8.15 - Unauthenticated SQL Injection
Medium
CVE-2025-24672
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13680
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12112
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2024-30535
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-3906
Easy Form Builder <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2567
Form Builder CP <= 1.2.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2021-24224
Easy Form Builder <= 1.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.