43 matches found
CVE-2026-32481
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481
The WordPress Ezoic plugin (versions ≤ 2.22.11) contains an unauthenticated broken authentication flaw discovered by HaiND. CVSS 7.5 HIGH (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) means any remote attacker can bypass authentication and access confidential data without credentials. No fix version or i...
EUVD-2026-60909
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Ezoic versions = 2.22.11...
CVE-2026-18789
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently...
CVE-2026-18789 Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently...
EUVD-2026-57102
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently...
CVE-2026-18789
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently...
CVE-2026-18789
The CVE-2026-18789 entry concerns the Ezoic WordPress plugin prior to version 2.23.1. The vulnerability arises from insufficient access restrictions on content export functionality exposed via REST routes, allowing unauthenticated attackers to trigger a server-side export of the site’s database (...
PT-2026-71027
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently...
EUVD-2022-44524
Malicious code in bioql PyPI...
EUVD-2023-29431
Malicious code in bioql PyPI...
EUVD-2022-44374
Malicious code in bioql PyPI...
CVE-2023-25476
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin = 4.68 versions...
CVE-2023-25476
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin = 4.68 versions...
CVE-2023-25476
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin = 4.68 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin = 4.68 versions...
CVE-2023-25476 WordPress AmpedSense – AdSense Split Tester Plugin <= 4.68 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin = 4.68 versions...