Lucene search
+L

9269 matches found

CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•24 views

WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

5.4CVSS6.6AI score0.00162EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•33 views

PT-2025-34039 · WordPress · Sendwp +1

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads versions prior to 3.5.1 Description: The Easy Digital Downloads plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validations in the edd sendwp disconnect and edd sendwp remote insta...

5.4CVSS6.6AI score0.00162EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•8 views

CVE-2025-8102: Cross-Site Request Forgery (CSRF)

The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missing nonce validations in the eddsendwpdisconnect and eddsendwpremoteinstall functions. This makes it possible for unauthenticated attackers t...

5.4CVSS5.5AI score0.00162EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/19 11:42 p.m.•21 views

WordPress Easy Digital Downloads plugin <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions vulnerability

Cross-Site Request Forgery to Plugin Deactivation via eddsendwpdisconnect and eddsendwpremoteinstall Functions vulnerability discovered by wesley wcraft in WordPress Plugin Easy Digital Downloads versions = 3.5.0...

5.4CVSS6.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/08/19 8:15 p.m.•18 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS0.00258EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/08/19 12:00 a.m.•25 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

0.00258EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•3 views

CVE-2025-50926: Improper Neutralization of Special Elements used in an SQL Command

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits2References1
CVE
CVE
•added 2025/08/19 12:00 a.m.•45 views

CVE-2025-50926

The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection vulnerability. The flaw exists in the List All Email Addresses function, specifically via the id parameter. This vulnerability allows for parameter injection which can lead to an SQL injection attack. As of th...

6.5CVSS8.5AI score0.00258EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•19 views

PT-2025-33860

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the List All Email Addresses function. Recommendations: At the moment, there is no...

6.5CVSS8AI score0.00258EPSS
SaveExploits2References6
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•18 views

Easy Hosting Control Panel EHCP 安全漏洞

Easy Hosting Control Panel EHCP is a hosting control panel from Easy Hosting Control Panel, Inc. A security vulnerability exists in Easy Hosting Control Panel EHCP version v20.04.1.b, which originates from a parameter injection and could lead to an SQL injection attack...

6.5CVSS7.8AI score0.00258EPSS
SaveExploits2References3
Packet Storm News
Packet Storm News
•added 2025/08/18 12:00 a.m.•17 views

Addressing Side-Channel Threats in Quantum Key Distribution Via Deep Anomaly Detection

Traditional countermeasures against security side channels in quantum key distribution QKD systems often suffer from poor compatibility with deployed infrastructure, the risk of introducing new vulnerabilities, and limited applicability to specific types of attacks. In this work, we propose an...

6.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•19 views

CVE-2025-54678

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through = 3.8.15...

9.3CVSS5.9AI score0.00305EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•16 views

WordPress RT Easy Builder - Advanced addons for Elementor plugin cross-site scripting vulnerability

WordPress RT Easy Builder - Advanced addons for Elementor plugin is a plugin designed for WordPress websites, mainly used to extend the design features of Elementor pages. The WordPress RT Easy Builder - Advanced addons for Elementor plugin suffers from a cross-site scripting vulnerability that...

6.4CVSS6.5AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/14 7:15 p.m.•18 views

CVE-2025-54712

Missing Authorization vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Elementor Addons: from n/a through = 2.2.7...

4.3CVSS0.00198EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in @zalastax/nolb-easy (npm)

The package @zalastax/nolb-easy was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in cluster-easy-sed-throw-cloud (npm)

The package cluster-easy-sed-throw-cloud was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in do-wnload-available-heres-to-taking-it-easy-aq630-dofqws (npm)

The package do-wnload-available-heres-to-taking-it-easy-aq630-dofqws was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in easy-encode-notify-emulate-cache (npm)

The package easy-encode-notify-emulate-cache was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•3 views

Malicious code in easy-wallet (npm)

The package easy-wallet was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in easy-zero-gamma-promise-deploy (npm)

The package easy-zero-gamma-promise-deploy was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder