CVE-2024-13456 Easy Quiz Maker <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Easy Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment, scheduling management system from the individual developer Alex Tselegidis. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from a missing permission validation in index.php, resulting in elevated privileges...

WordPress plugin Easy Quiz Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-13456: Improper Neutralization of Input During Web Page Generation

The Easy Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

PT-2025-6461

Name of the Vulnerable Software and Affected Versions Easy Quiz Maker plugin for WordPress versions up to, and including, 2.0 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode due to insufficient input sanitization and output escaping on...

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, a personal developer. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from the unfiltered legalsettings parameter, making it susceptible to cross-site scripting attacks...

WordPress Easy Quiz Maker plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Easy Quiz Maker versions = 2.0...

WordPress Easy Booked Plugin <= 2.4.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by l8BL Patchstack Alliance in WordPress Plugin Easy Booked – Appointment Booking and Scheduling Management System for WordPress versions = 2.4.5...

CVE-2025-25077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

CVE-2025-25073

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles easy-wp-tiles allows Stored XSS.This issue affects Easy WP Tiles: from n/a through = 1...

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

CVE-2025-25073

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles easy-wp-tiles allows Stored XSS.This issue affects Easy WP Tiles: from n/a through = 1...

CVE-2025-25077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

CVE-2025-25123 WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2...

CVE-2025-25123

CVE-2025-25123 maps to a WordPress plugin issue: Easy Related Posts, affected versions are

CVE-2025-25077 WordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

CVE-2025-25077 WordPress Easy Chart Builder for WordPress plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dugbug Easy Chart Builder for WordPress easy-chart-builder allows Stored XSS.This issue affects Easy Chart Builder for WordPress: from n/a through = 1.3...

CVE-2025-25077

CVE-2025-25077 refers to a Stored XSS in Easy Chart Builder for WordPress (plugin)

CVE-2025-25073 WordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vasilis Triantafyllou Easy WP Tiles allows Stored XSS. This issue affects Easy WP Tiles: from n/a through 1...