CVE-2015-9369: Improper Neutralization of Input During Web Page Generation

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

CVE-2015-9367: Improper Neutralization of Input During Web Page Generation

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7326

Name of the Vulnerable Software and Affected Versions Easy Canadian Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy Canadian Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting...

Gartner names Microsoft a Leader in 2019 Endpoint Protection Platforms Magic Quadrant

Our mission as a company is to empower every person on the planet to achieve more. We deliver on that mission through products that achieve the highest marks in the industry, which we believe is inclusive of Gartner’s Magic Quadrant. We have been on a journey for the last several years working ha...

Code injection

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

CVE-2019-15318

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

CVE-2019-15318

CVE-2019-15318 concerns the WordPress plugin yikes-inc-easy-mailchimp-extender (before 6.5.3) with a vulnerability described as code injection via an admin input field. The NVD record lists a high base score (CVSS v2: 7.5; CVSS v3.0: 9.8, CRITICAL) and indicates network attack vector with low com...

CVE-2019-15318: Improper Control of Generation of Code

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...

PT-2019-14047

Name of the Vulnerable Software and Affected Versions yikes-inc-easy-mailchimp-extender plugin versions prior to 6.5.3 Description The issue concerns code injection via the admin input field, allowing for potential malicious code execution. Recommendations For versions prior to 6.5.3, update to...

WordPress easy-digital-downloads plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress easy-digital-downloads plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A SQL injection vulnerability exists in the WordPress easy-digital-download...

WordPress Easy Property Listings plugin <= 3.3.5 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Easy Property Listings plugin versions = 3.3.5. Solution Update the WordPress Easy Property Listings plugin to the latest available version at least 3.4...

Easy Property Listings < 3.4 - Cross-Site Scripting (XSS)

Changelog for 3.4 mentions: - MAJOR Security Update Release. Important to update to the latest version to protect your website. Easy Property Listings has been reviewed and approved by the WordPress plugin team. - This is a critical update to Easy Property Listings plugin that is focused on...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

CVE-2015-9324

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...

Design/Logic Flaw

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

Sql injection

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection...

CVE-2019-15116

CVE-2019-15116 affects the WordPress Easy Digital Downloads plugin prior to version 2.9.16. The vulnerability is a cross-site scripting (XSS) flaw associated with how IP addresses are logged, and multiple sources describe it as stored XSS. Impact is client-side script execution when vulnerable da...