cleantalk
Vulnerabilities and Security Researches

Easy Form Builder, CVE-2025-54678

CVE, Research URL

CVE-2025-54678

Home page URL

Security reports for Easy Form Builder

Application

Easy Form Builder

Published on
Aug 14, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder allows Blind SQL Injection. This issue affects Easy Form Builder: from n/a through 3.8.15.
Affected versions
Min -, max 3.8.16.
Status
vulnerable
Previous vulnerability researches
WooCommerce Affiliate Plugin – Coupon Affiliates (CVE-2025-3598) , Apr 20, 2025
WooCommerce Affiliate Plugin – Coupon Affiliates (CVE-2024-12421) , Dec 15, 2024
WooCommerce Affiliate Plugin – Coupon Affiliates (CVE-2023-30475) , Jun 06, 2024
WooCommerce Affiliate Plugin – Coupon Affiliates (CVE-2022-0818) , Jun 06, 2024
WooCommerce Affiliate Plugin – Coupon Affiliates (CVE-2023-28992) , Jun 06, 2024
New vulnerability
Joinchat , Aug 15, 2025
Thank You Page Customizer for WooCommerce – Increase Your Sales (CVE-2025-30993) , Aug 15, 2025
GMap Generator (CVE-2025-8568) , Aug 14, 2025
GiveWP – Donation Plugin and Fundraising Platform (CVE-2025-47444) , Aug 14, 2025
Easy Form Builder (CVE-2025-54678) , Aug 14, 2025