8734 matches found
CVE-2026-14224
The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A subscriber-lev...
EUVD-2026-50119
The Easy Appointments WordPress plugin through 3.12.26 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A...
WordPress Easy Appointments plugin <= 3.12.26 - Subscriber+ Cross-User Appointment Data Modification vulnerability
Subscriber+ Cross-User Appointment Data Modification vulnerability discovered by Duy Tran in WordPress Plugin Easy Appointments versions = 3.12.26...
CVE-2026-14224
The Easy Appointments WordPress plugin versions prior to 3.12.28 is vulnerable to an IDOR (Insecure Direct Object Reference) flaw. The plugin fails to verify that the appointment targeted by its customer-data update action belongs to the authenticated user, relying instead on a shared nonce that ...
CVE-2026-12476
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
CVE-2026-12476 Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
CVE-2026-12476 Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
CVE-2026-12476
The Easy Digital Downloads plugin for WordPress (up to v3.6.9) is affected by Arbitrary File Upload due to insufficient validation in edd_do_ajax_import_file_upload(). The function relies on the client-provided $_FILES['edd-import-file']['type'] against a CSV allow-list and uses raw move_uploaded...
CVE-2026-12476
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
EUVD-2026-50108
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
PT-2026-65695
The Easy Appointments WordPress plugin through 3.12.26 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A...
PT-2026-65685
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edd do ajax import file upload function , which only checks the client-supplied $ FILES'edd-import-file''type'...
CVE-2026-14224: Authorization Bypass Through User-Controlled Key
The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A subscriber-lev...
CVE-2026-12476: Unrestricted Upload of File with Dangerous Type
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edddoajaximportfileupload function , which only checks the client-supplied $FILES'edd-import-file''type' Content-Ty...
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
Google::oauth at application/controllers/Google.php:278 stores its URL-supplied providerid in the session, and oauthcallback saves the issued Google OAuth token against that row without checking the caller owns the provider. Any logged-in backend user admin, provider, or secretary rebinds a peer...
CVE-2026-66476
Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-66476 WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability
Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions...