Lucene search
+L

7612 matches found

Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.1 views

CVE-2025-53572 WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injection.This issue affects WP Easy Contact: from n/a through = 4.0.1...

8.1CVSS5.2AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/28 12:37 p.m.15 views

CVE-2025-53572

CVE-2025-53572: Deserialization of untrusted data in the WordPress plugin WP Easy Contact (emarket-design) allows PHP object injection in version &lt;= 4.0.1. Affected: WP Easy Contact

8.1CVSS5.9AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/28 7:11 a.m.4 views

MAL-2025-41670 Malicious code in easy-https (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/28 7:11 a.m.6 views

Malicious code in easy-https (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2025/08/28 12:00 a.m.6 views

WordPress plugin WP Easy Contact 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.1CVSS6.8AI score0.00325EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/08/26 12:31 a.m.9 views

Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS7.7AI score0.00357EPSS
SaveExploits2References6Affected Software1
OSV
OSV
added 2025/08/26 12:31 a.m.9 views

GHSA-2F28-69J7-85HF Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

7.1CVSS8.5AI score0.00357EPSS
SaveExploits2References6
GitLab Advisory Database
GitLab Advisory Database
added 2025/08/26 12:00 a.m.14 views

Easy!Appointments SQL injection vulnerability

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS8.5AI score0.00357EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2025/08/25 6:15 p.m.9 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS0.00357EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2025/08/25 11:05 a.m.8 views

WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by astra.r3verii in WordPress Plugin WP Easy Contact versions = 4.0.1...

8.1CVSS7AI score0.00325EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.7 views

Easy!Appointments 安全漏洞

Easy!Appointments is a web-based appointment and schedule management system by Alex Tselegidis, an individual developer. A security vulnerability exists in Easy!Appointments version 1.5.1, which stems from an SQL injection in the orderby parameter...

8.1CVSS7.6AI score0.00357EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/08/25 12:00 a.m.1 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8AI score0.00357EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/08/25 12:00 a.m.9 views

PT-2025-34688 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy!Appointments version 1.5.1 Description: Easy!Appointments version 1.5.1 contains a SQL injection issue via the order by parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

7.1CVSS7.1AI score0.00357EPSS
SaveExploits2References10
Cvelist
Cvelist
added 2025/08/25 12:00 a.m.21 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

0.00357EPSS
SaveExploits2References2
OSV
OSV
added 2025/08/25 12:00 a.m.7 views

CVE-2025-50383

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...

8.1CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2025/08/25 12:00 a.m.70 views

CVE-2025-50383

CVE-2025-50383 affects Easy!Appointments, specifically version 1.5.1, where a SQL injection vulnerability exists in the order_by parameter. The issue is confirmed by multiple sources in the connected documents, including CVE records and advisories. The CVSS v3.1 base score is 8.1 (HIGH), with net...

8.1CVSS8.5AI score0.00357EPSS
SaveExploits2References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.11 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

6.1CVSS6.9AI score0.00292EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/08/22 11:31 a.m.11 views

CVE-2025-8102

The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missing nonce validations in the eddsendwpdisconnect and eddsendwpremoteinstall functions. This makes it possible for unauthenticated attackers t...

5.4CVSS6.1AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.28 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

0.00292EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/08/21 8:10 p.m.17 views

CVE-2010-20113 EasyFTP Server list.html path Stack Buffer Overflow

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the...

9.3CVSS0.01555EPSS
SaveExploits1References3
Rows per page
Query Builder