Lucene search
+L

8 matches found

NVD
NVD
•added 2026/10/15 7:17 a.m.•9 views

CVE-2026-104643

The Easy HTTPS Redirection SSL WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a...

4.2CVSS0.00145EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 6:00 a.m.•12 views

EUVD-2026-101850

The Easy HTTPS Redirection SSL WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a...

4.2CVSS5.5AI score0.00145EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 6:00 a.m.•20 views

CVE-2026-104643

The Easy HTTPS Redirection (SSL) WordPress plugin, in versions before 2.0.2 , contains a vulnerability where it fails to perform capability checks on certain AJAX actions . This flaw allows any authenticated user , such as a Subscriber, to access URLs collected by the plugin's content scanner fro...

4.2CVSS5.5AI score0.00145EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/15 6:00 a.m.•9 views

WordPress Easy HTTPS Redirection (SSL) plugin < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability

Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Easy HTTPS Redirection SSL versions 2.0.2...

4.2CVSS5.8AI score0.00145EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/15 6:00 a.m.•10 views

CVE-2026-104643 Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite

The Easy HTTPS Redirection SSL WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a...

5.5AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/15 6:00 a.m.•46 views

CVE-2026-104643 Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite

The Easy HTTPS Redirection SSL WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a...

0.00145EPSS
SaveExploits0References1
osv_mal
osv_mal
•added 2025/08/28 7:11 a.m.•7 views

MAL-2025-41670 Malicious code in easy-https (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 7:11 a.m.•9 views

Malicious code in easy-https (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Rows per page
Query Builder