Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive form response data, including messages, admin replies, and user information due to a logic error in the authorization check that uses AND (&&) instead of OR (||).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-14067 The Easy Form Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX actions in all versions up … https://www.cve.org/CVERecord?id=CVE-2025-14067
Post summary
The post provides a brief disclosure of CVE‑2025‑14067, detailing the technical flaw but offering no PoC, exploit, or mitigation information.
CVE-2025-14067 WordPress Easy Form Builder Authenticated Data Exposure via Improper Acc... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14067 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet references CVE-2025-14067, noting an authenticated data‑exposure flaw in WordPress Easy Form Builder, but offers no evidence of PoC, exploitation, patch, or false‑positive claims.
⚡ New CVE Alert: CVE-2025-14067 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-14067 #CVE-2025-14067 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/LB5CQWRUWb
Post summary
A new Medium severity CVE affecting WordPress has been reported with a CVSS score of 5.3; no PoC, exploit, or patch information is provided.