9302 matches found
CVE-2025-11994 Easy Email Subscription <= 1.3 - Unauthenticated Stored Cross-Site Scripting
The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-11994
The CVE-2025-11994 entry refers to the WordPress Easy Email Subscription plugin (versions up to and including 1.3) with an unauthenticated stored XSS via the name parameter due to insufficient input sanitization and output escaping. Wordfence’s report confirms this as a real vulnerability affecti...
CVE-2025-11994 Easy Email Subscription <= 1.3 - Unauthenticated Stored Cross-Site Scripting
The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
WordPress Easy Email Subscription plugin <= 1.3 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Easy Email Subscription versions = 1.3...
PT-2025-46648
Name of the Vulnerable Software and Affected Versions Easy Email Subscription plugin for WordPress versions up to and including 1.3 Description The software is susceptible to Stored Cross-Site Scripting through the name parameter. Insufficient input sanitization and output escaping allow...
WordPress plugin Easy Email Subscription 跨站脚本漏洞
The WordPress Easy Email Subscription plugin is a plugin for adding email subscription functionality to your WordPress website, allowing users to receive new content updates via email. WordPress Easy Email Subscription plugin suffers from a cross-site scripting vulnerability that stems from the...
CVE-2025-11994: Improper Neutralization of Input During Web Page Generation
The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
EUVD-2025-92380
Malicious code in easyguppyz3n npm...
MAL-2025-101861 Malicious code in easy_carp-notthedev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4bfe7f4a0395943ec95e05fb2ef6b49e39ec6464127fde6009ef33fadc632a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64391
Malicious code in easysolez3n npm...
EUVD-2025-54723
Malicious code in easy-cyan-iguana npm...
Malicious code in easy-cyan-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cc228295afdc4130186ceef03ad021084b0214b1faeff79cbce1c09602160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54721
Malicious code in easy-violet-swallow npm...
EUVD-2025-54724
Malicious code in easy-aquamarine-shrimp npm...
EUVD-2025-54722
Malicious code in easy-turquoise-viper npm...
MAL-2025-67927 Malicious code in easy-turquoise-viper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4352792955d9fd4e29f6f960e192be61468901db93b715c89c6d57c7746c1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67926 Malicious code in easy-cyan-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cc228295afdc4130186ceef03ad021084b0214b1faeff79cbce1c09602160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
WordPress Easy Appointments plugin cross-site scripting vulnerability
WordPress Easy Appointments plugin is a free WordPress appointment management plugin, mainly used to create and manage service appointment system, support multi-location, multi-service, multi-staff appointment function. A cross-site scripting vulnerability exists in the WordPress Easy Appointment...
WordPress Easy Digital Downloads plugin order manipulation vulnerability
WordPress Easy Digital Downloads plugin is a free plugin designed for WordPress to create and manage a digital merchandising store that supports the sale of downloadable content such as eBooks, software, media and more. WordPress Easy Digital Downloads plugin suffers from an order manipulation...