WordPress Easy Code Snippets plugin <= 1.0.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Easy Code Snippets versions = 1.0.2...

WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Easy Replace versions = 1.3...

WordPress Easy Blocks pro plugin <= 1.0.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Khalid Yusuf Patchstack Alliance in WordPress Plugin Easy Blocks pro versions = 1.0.21...

WordPress Easy Social Feed Premium plugin <= 6.6.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Easy Social Feed Premium versions = 6.6.2...

CVE-2024-53793

Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...

CVE-2024-53793 WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29...

CVE-2024-53793

CVE-2024-53793 describes a CSRF to SQL Injection vulnerability in the WordPress plugin eDoc Easy Tables (versions

CVE-2024-53793 WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...

WordPress plugin eDoc Easy Tables 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2024-53793: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...

PT-2024-35907 · Unknown · Edoc Easy Tables

Name of the Vulnerable Software and Affected Versions: eDoc Easy Tables versions prior to 1.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a web...

WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin eDoc Easy Tables versions = 1.29...

CVE-2024-9044

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

CVE-2024-9044 XML External Entity (XXE) Vulnerability in EasyTax

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

PT-2024-39386 · Unknown · Easy Tax Client

Name of the Vulnerable Software and Affected Versions: Easy Tax Client Software 2023 versions 1.2 and earlier Description: A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software across multiple platforms, including Windows, Linux, and macOS. Recommendations: For...

CVE-2024-9044: Improper Restriction of XML External Entity Reference

A XML External Entity XXE vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS...

CVE-2024-11685: Improper Neutralization of Input During Web Page Generation

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.2.9. This makes it possible for unauthenticated attacker...

CVE-2024-11684: Improper Neutralization of Input During Web Page Generation

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVE-2024-11145

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...

CVE-2024-11145 Easy Folder Listing Pro deserialization vulnerability

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...