Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 2.3 vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2015-9505
The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital Downloads
6.1
CVSSv3
CVE-2015-9533
The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Lattice -
6.1
CVSSv3
CVE-2015-9517
The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Manual Purchases -
6.1
CVSSv3
CVE-2015-9518
The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Pdf Invoices -
6.1
CVSSv3
CVE-2015-9509
The Easy Digital Downloads (EDD) Content Restriction extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Content Restriction -
6.1
CVSSv3
CVE-2015-9512
The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Csv Manager -
6.1
CVSSv3
CVE-2015-9525
The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Recurring Payments -
NA
CVE-2014-3907
Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users....
Mailpoet Mailpoet Newsletters 2.6.6Mailpoet Mailpoet Newsletters 2.6.4Mailpoet Mailpoet Newsletters 2.6Mailpoet Mailpoet Newsletters 2.5.9.3Mailpoet Mailpoet Newsletters 2.5.4Mailpoet Mailpoet Newsletters 2.5.2Mailpoet Mailpoet Newsletters 2.4Mailpoet Mailpoet Newsletters 2.3.4Mailpoet Mailpoet Newsletters 2.2.3Mailpoet Mailpoet Newsletters 2.2.1Mailpoet Mailpoet Newsletters 2.1.4Mailpoet Mailpoet Newsletters 2.6.3Mailpoet Mailpoet Newsletters 2.6.2Mailpoet Mailpoet Newsletters 2.6.1Mailpoet Mailpoet Newsletters 2.5.1Mailpoet Mailpoet Newsletters 2.5Mailpoet Mailpoet Newsletters 2.4.4Mailpoet Mailpoet Newsletters 2.4.3Mailpoet Mailpoet Newsletters 2.4.2Mailpoet Mailpoet Newsletters 2.1.9Mailpoet Mailpoet Newsletters 2.1.8Mailpoet Mailpoet Newsletters 2.1.7Mailpoet Mailpoet Newsletters 2.1.6Mailpoet Mailpoet Newsletters 2.0.3Mailpoet Mailpoet Newsletters 2.0.2Mailpoet Mailpoet Newsletters 2.0.1Mailpoet Mailpoet Newsletters 2.0Mailpoet Mailpoet Newsletters 2.6.9Mailpoet Mailpoet NewslettersMailpoet Mailpoet Newsletters 2.6.8Mailpoet Mailpoet Newsletters 2.5.9.1Mailpoet Mailpoet Newsletters 2.5.9Mailpoet Mailpoet Newsletters 2.5.8Mailpoet Mailpoet Newsletters 2.5.7Mailpoet Mailpoet Newsletters 2.3.3Mailpoet Mailpoet Newsletters 2.3.2Mailpoet Mailpoet Newsletters 2.3.1Mailpoet Mailpoet Newsletters 2.3Mailpoet Mailpoet Newsletters 2.1.1Mailpoet Mailpoet Newsletters 2.1Mailpoet Mailpoet Newsletters 2.0.9.5Mailpoet Mailpoet Newsletters 2.0.9Mailpoet Mailpoet Newsletters 2.0.8Mailpoet Mailpoet Newsletters 1.1.1Mailpoet Mailpoet Newsletters 1.1Mailpoet Mailpoet Newsletters 1.0.1Mailpoet Mailpoet Newsletters 1.0Mailpoet Mailpoet Newsletters 2.6.7Mailpoet Mailpoet Newsletters 2.6.5Mailpoet Mailpoet Newsletters 2.5.9.4Mailpoet Mailpoet Newsletters 2.5.9.2Mailpoet Mailpoet Newsletters 2.5.5Mailpoet Mailpoet Newsletters 2.5.3Mailpoet Mailpoet Newsletters 2.4.1Mailpoet Mailpoet Newsletters 2.3.5Mailpoet Mailpoet Newsletters 2.2.2Mailpoet Mailpoet Newsletters 2.2Mailpoet Mailpoet Newsletters 2.1.5Mailpoet Mailpoet Newsletters 2.1.3Mailpoet Mailpoet Newsletters 2.0.7Mailpoet Mailpoet Newsletters 2.0.5Mailpoet Mailpoet Newsletters 1.1.4Mailpoet Mailpoet Newsletters 1.1.2Mailpoet Mailpoet Newsletters 0.9.6Mailpoet Mailpoet Newsletters 0.9.1Mailpoet Mailpoet Newsletters 2.1.2Mailpoet Mailpoet Newsletters 2.0.6Mailpoet Mailpoet Newsletters 2.0.4Mailpoet Mailpoet Newsletters 1.1.5Mailpoet Mailpoet Newsletters 1.1.3Mailpoet Mailpoet Newsletters 0.9.2Mailpoet Mailpoet Newsletters 0.9
6.1
CVSSv3
CVE-2015-9524
The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Recount Earnings -
6.1
CVSSv3
CVE-2015-9513
The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused....
Sandhillsdev Easy Digital DownloadsEasydigitaldownloads Favorites -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-5172CVE-2023-44023CVE-2023-30845elevation of privilegeinjectionCVE-2023-43234CVE-2023-41991cross-site request forgeryseacmsCVE-2023-5197
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook