9347 matches found
CVE-2025-8102
CVE-2025-8102: Easy Digital Downloads for WordPress (versions ≤ 3.5.0) is vulnerable to Cross-Site Forgery via missing nonce checks in edd_sendwp_disconnect and edd_sendwp_remote_install. This CSRF allows unauthenticated attackers to deactivate or trigger activation/deactivation of the SendWP plu...
CVE-2025-8102 Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions
The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missing nonce validations in the eddsendwpdisconnect and eddsendwpremoteinstall functions. This makes it possible for unauthenticated attackers t...
PT-2025-34039 · WordPress · Sendwp +1
Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads versions prior to 3.5.1 Description: The Easy Digital Downloads plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validations in the edd sendwp disconnect and edd sendwp remote insta...
WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...
CVE-2025-8102: Cross-Site Request Forgery (CSRF)
The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missing nonce validations in the eddsendwpdisconnect and eddsendwpremoteinstall functions. This makes it possible for unauthenticated attackers t...
WordPress Easy Digital Downloads plugin <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions vulnerability
Cross-Site Request Forgery to Plugin Deactivation via eddsendwpdisconnect and eddsendwpremoteinstall Functions vulnerability discovered by wesley wcraft in WordPress Plugin Easy Digital Downloads versions = 3.5.0...
CVE-2025-50926
Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...
Easy Hosting Control Panel EHCP 安全漏洞
Easy Hosting Control Panel EHCP is a hosting control panel from Easy Hosting Control Panel, Inc. A security vulnerability exists in Easy Hosting Control Panel EHCP version v20.04.1.b, which originates from a parameter injection and could lead to an SQL injection attack...
CVE-2025-50926
The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection vulnerability. The flaw exists in the List All Email Addresses function, specifically via the id parameter. This vulnerability allows for parameter injection which can lead to an SQL injection attack. As of th...
CVE-2025-50926
Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...
PT-2025-33860
Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the List All Email Addresses function. Recommendations: At the moment, there is no...
CVE-2025-50926: Improper Neutralization of Special Elements used in an SQL Command
Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...
Addressing Side-Channel Threats in Quantum Key Distribution Via Deep Anomaly Detection
Traditional countermeasures against security side channels in quantum key distribution QKD systems often suffer from poor compatibility with deployed infrastructure, the risk of introducing new vulnerabilities, and limited applicability to specific types of attacks. In this work, we propose an...
CVE-2025-54678
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through = 3.8.15...
WordPress RT Easy Builder - Advanced addons for Elementor plugin cross-site scripting vulnerability
WordPress RT Easy Builder - Advanced addons for Elementor plugin is a plugin designed for WordPress websites, mainly used to extend the design features of Elementor pages. The WordPress RT Easy Builder - Advanced addons for Elementor plugin suffers from a cross-site scripting vulnerability that...
CVE-2025-54712
Missing Authorization vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Elementor Addons: from n/a through = 2.2.7...
Malicious code in @zalastax/nolb-easy (npm)
The package @zalastax/nolb-easy was found to contain malicious code...
Malicious code in epsilon-tree-easy-decrypt-iota (npm)
The package epsilon-tree-easy-decrypt-iota was found to contain malicious code...