Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 8:51 p.m.•20 views

CVE-2021-4411

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the wpepdownloadtransactioninexcel function. This makes it possible for unauthenticated attackers...

4.3CVSS5.2AI score0.00395EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/24 12:00 a.m.•8 views

PT-2024-37200

Name of the Vulnerable Software and Affected Versions: WP EasyPay – Square for WordPress plugin versions up to, and including, 4.2.3 Description: The issue allows unauthorized modification of data due to a missing capability check on the wpep square disconnect function. This makes it possible for...

6.5CVSS5.7AI score0.00398EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/24 12:00 a.m.•6 views

CVE-2024-5861: Missing Authorization

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpepsquaredisconnect function in all versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to disconnect squar...

6.5CVSS5.8AI score0.00398EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/24 12:00 a.m.•28 views

WordPress plugin WP EasyPay – Square for WordPress has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.5CVSS5.8AI score0.00398EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•7 views

CVE-2021-4411: Cross-Site Request Forgery (CSRF)

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the wpepdownloadtransactioninexcel function. This makes it possible for unauthenticated attackers...

4.3CVSS5.3AI score0.00395EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•23 views

WordPress Plugin WP EasyPay – Square for WordPress Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP EasyPay...

4.3CVSS5AI score0.00395EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/25 12:00 a.m.•10 views

CVE-2022-47177: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Easy Pay WP EasyPay – Square for WordPress plugin = 4.1 versions...

8.8CVSS8.2AI score0.003EPSS
SaveExploits0References3
Rows per page
Query Builder