Lucene search
+L

8765 matches found

Vulnrichment
Vulnrichment
•added 2026/05/22 4:29 a.m.•17 views

CVE-2026-9018 Easy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/05/22 4:29 a.m.•25 views

EUVD-2026-31410

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•19 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•23 views

PT-2026-42805

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•23 views

Easy Chat Server 安全漏洞

Easy Chat Server is a LAN chat server software developed by Easy Chat Server Inc. Version 3.1 of Easy Chat Server contains a security vulnerability. This vulnerability stems from the UserName parameter, which allows for directory traversal. As a result, remote attackers may gain access to sensiti...

6.5CVSS6AI score0.01112EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•3 views

CVE-2026-36228: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.4AI score0.00479EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•14 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

6.1AI score0.00479EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•31 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

0.01112EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•32 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

0.00479EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•23 views

Easy Chat Server 安全漏洞

Easy Chat Server is a LAN chat server software developed by Easy Chat Server Inc. Version 3.1 of Easy Chat Server has a security vulnerability. This vulnerability stems from a buffer overflow in the chat message function, which could allow remote attackers to obtain sensitive information and...

7.3CVSS6.3AI score0.00479EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•30 views

EUVD-2026-31472

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•32 views

PT-2026-42729

Name of the Vulnerable Software and Affected Versions Easy Elements for Elementor – Addons & Website Templates versions prior to 1.4.6 Description An issue exists in the easyel handle register function where the wp ajax nopriv eel register AJAX handler processes the custom meta POST array. The...

8.8CVSS5.7AI score0.00802EPSS
SaveExploits1References11
CVE
CVE
•added 2026/05/22 12:00 a.m.•62 views

CVE-2026-36227

The Easy Chat Server 3.1 software is vulnerable to a Directory Traversal issue within its user registration handling at the /registresult.htm endpoint. The root cause is insufficient sanitization of the UserName parameter, which allows a remote attacker to supply traversal-style values (e.g., ../...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•3 views

CVE-2026-36227: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.4AI score0.01112EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•36 views

EUVD-2026-31473

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•37 views

PT-2026-42804

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•36 views

WordPress plugin Easy Elements for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References5
CVE
CVE
•added 2026/05/22 12:00 a.m.•59 views

CVE-2026-36228

The Easy Chat Server 3.1 software contains a buffer overflow vulnerability in the chat message functionality. A remote attacker can cause the service to terminate unexpectedly (Denial of Service) by submitting a chat message request with an oversized payload in the mtowho recipient field at the /...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•22 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•13 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.1AI score0.01112EPSS
SaveExploits1References1
Rows per page
Query Builder