Easy CountDowner <= 1.0.8 - Cross-Site Request Forgery

Description The Easy CountDowner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform unauthorized actions a...

Easy Textillate <= 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting

Description The Easy Textillate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

WordPress Easy Set Favicon Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Easy Set Favicon Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33645 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6c770d55f2af Credits Dimas Maulana Required privilege...

WordPress Easy Accept Payments Plugin <= 4.9.10 is vulnerable to Broken Access Control

Software Easy Accept Payments Type Plugin Vulnerable versions = 4.9.10 Fixed in 5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33591 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID dc8baebcdbf1 Credits Joshua Chan Required...

CVE-2024-32795

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

CVE-2024-32795

CVE-2024-32795 describes a Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler. Connected sources indicate the issue affects the WPCal.Io – Easy Meeting Scheduler product and specifically cites versions from n/a through 0.9.5.8. The available documents do ...

PT-2024-24868 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

Events Made Easy Plugin for WordPress <= 2.3.14 SQL Injection

The WordPress Events Made Easy Plugin installed on the remote host is affected by an authenticated SQL Injection via the searchname parameter of the emerecurrenceslist action. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...

WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Easy Property Listings versions = 3.5.3...

Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Easyappointments

CVE-2022-0482 Vulnerability Exploitation Introduction This...

WordPress Easy Custom Auto Excerpt plugin <= 2.4.12 - Sensitive Information Exposure vulnerability

Sensitive Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin Easy Custom Auto Excerpt versions = 2.4.12...

WordPress Easy Custom Auto Excerpt Plugin <= 2.4.12 is vulnerable to Sensitive Data Exposure

Software Easy Custom Auto Excerpt Type Plugin Vulnerable versions = 2.4.12 Fixed in 2.5.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3312 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b2ba9ac0c028 Credits Krzysztof Zając...

[SECURITY] Fedora 39 Update: filezilla-3.67.0-1.fc39

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFTP - Cross-platform - Available in many languages - Supports resume and transfer of large files greater than 4GB - Easy to use Site Manager and transfe...

WordPress Easy Social Feed plugin < 6.5.6 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Easy Social Feed versions 6.5.6...

CVE-2024-32526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

CVE-2024-32526

CVE-2024-32526 : In Easy Textillate (WordPress plugin), stored XSS exists due to improper input neutralization during web page generation, affecting versions

CVE-2024-32526 WordPress Easy Textillate plugin <= 2.02 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02...

CVE-2024-32538

Cross-Site Request Forgery CSRF vulnerability in Joshua Eldridge Easy CountDowner allows Stored XSS.This issue affects Easy CountDowner: from n/a through 1.0.8...

CVE-2024-32538 WordPress Easy CountDowner plugin <= 1.0.8 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Joshua Eldridge Easy CountDowner allows Stored XSS.This issue affects Easy CountDowner: from n/a through 1.0.8...

CVE-2024-32538

CVE-2024-32538 affects the Easy CountDowner WordPress plugin. The issue is described as a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS in Easy CountDowner versions up to 1.0.8 (and affected path listed as n/a through 1.0.8). The connected Red Hat and Wordfence entries co...