CVE-2026-85123
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to create WordPress accounts on a site whose owner has disabled registration.
| Vendor | unknown |
| Product | easy form builder by whitestudio |
| Published | Sep 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown easy form builder by whitestudio
Be the first to know when new unknown vulnerabilities affecting unknown easy form builder by whitestudio are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Easy Form Builder by WhiteStudio
4.0.0 < 4.2.0
References
Credits
Artus KG WPScan