CVE-2025-62052

Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through = 1.6.43...

EUVD-2025-35377

Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through = 1.6.43...

CVE-2025-62052

CVE-2025-62052 : WordPress plugin One Page Express Companion (≤1.6.43) has a Missing Authorization (Broken Access Control) vulnerability. The public CVSS 3.1 vector shows Network access, Low attack complexity, Low privileges required, no user interaction, and impact limited to confidentiality (C:...

WordPress One Page Express Companion Plugin <= 1.6.37 is vulnerable to Cross Site Scripting (XSS)

Software One Page Express Companion Type Plugin Vulnerable versions = 1.6.37 Fixed in 1.6.38 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4703 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 44d8656d9c4b Credits stealthcopt...