CVE-2026-13439: Unauthenticated Privilege Escalation in Easy Form Builder by WhiteStudio WordPress Plugin
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to unauthenticated privilege escalation to administrator in versions up to 4.0.11. This vulnerability allows unauthenticated attackers to reset the password of any WordPress user, including administrators, and gain full administrator access. A CVSS score of 9.8 indicates critical severity.