Easy Banners 1.4 - Cross-Site Scripting (XSS)

The easy-banners WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Socializer 2.4.2 - admin/wpsr-services-selector.php val Parameter XSS

The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability...

Event Easy Calendar 1.0.0 - Multiple Administrator Action CSRF

The event-easy-calendar WordPress plugin was affected by a Multiple Administrator Action CSRF security vulnerability...

Event Easy Calendar 1.0.0 - Multiple Unspecified XSS

The event-easy-calendar WordPress plugin was affected by a Multiple Unspecified XSS security vulnerability...

Really Easy Slider 0.1 - Shell Upload

The really-easy-slider WordPress plugin was affected by a Shell Upload security vulnerability...

WP Easy Gallery <= 1.7 - Cross-Site Scripting (XSS)

The WP Easy Gallery – WordPress Gallery Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Easy Contact Forms Export 1.1.0 - Information Disclosure

The easy-contact-forms-exporter WordPress plugin was affected by an Information Disclosure security vulnerability...

Easy Media Gallery 1.2.25 - includes/emg-settings.php spg_add_admin Function Admin User Creation CSRF

The Gallery – Photo Albums Plugin WordPress plugin was affected by an includes/emg-settings.php spgaddadmin Function Admin User Creation CSRF security vulnerability...

WordPress Easy Media Gallery Plugin <= 1.2.25 - CSRF

This plugin is prone to a cross site request forgery vulnerability in includes/emg-settings.php spgaddadmin function. Solution Update the plugin...

UBUNTU-CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

WordPress Over Easy Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

VulnCheck KEV: CVE-2019-25141

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to...

Detours to modify the paragraph properties of vulnerability-vulnerability warning-the black bar safety net

Detours to modify the paragraph properties of the vulnerability Affected Software and systems Detours3. 0 and previous versions Description This issue will be its positioning as a vulnerability may be less suitable, the more likely that Detours a BUG, but because the defect will cause the exploit...

JAX-RS: Information disclosure via XML eXternal Entity (XXE)

It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity XXE attacks on RESTEasy applications accepting XML input...

CVE-2014-4723

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

CVE-2014-4723

CVE-2014-4723 describes an XSS vulnerability in the WordPress Easy Banners plugin version 1.4. The issue allows remote attackers to inject arbitrary script or HTML via the name parameter to wp-admin/options-general.php. Impact is consistent with XSS (remote execution of script in the context of t...

CVE-2014-4723

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

WordPress Easy Banners Plugin <= 1.4 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "name" parameter to wp-admin/options-general.php. Solution Update the plugin...

EFS Software Easy File Management Web Server UserID Buffer Overflow

A stack buffer overflow vulnerability exist in Easy File Management Web Server. The vulnerability is due to an boundary error when handling UserID cookie. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable server...