Easy Registration Forms
Approved changes feed: RSS · Atom
cpe:2.3:a:easyregistrationforms:easy_registration_forms:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Easyregistrationforms (5ae96129-3373-5a24-b6d7-e994fb7b2e70) |
|---|---|
| Product | Easy Registration Forms (94346983-47e1-5b67-b4eb-62201810f97d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5134 |
vulnerable | 2026-06-08 06:19:42.534803 |
Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
MEDIUM (4.3)
The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erforms_user_meta' shortcode in versions up to, and including, 2.1.1 due to insufficient controls on the information retrievable via the shortcode. This makes it possible for authenticated attackers, with subscriber-level capabilities or above, to retrieve arbitrary sensitive user meta.
Published: 2023-09-23T07:34:02.132Z
Updated: 2026-04-08T16:53:38.702Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39353 |
vulnerable | 2026-06-08 05:33:50.124569 |
Easy Registration Forms <= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
HIGH (8.8)
The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajax_add_form function found in the ~/includes/class-form.php file which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 2.1.1.
Published: 2021-11-19T15:34:11.033Z
Updated: 2025-02-14T17:51:15.687Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.