Eazydocs (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-02. Vendor: Unknown.

CVEs of Eazydocs

• CVE-2024-3999 - CVSS 4.8 (medium), 2024-07-02: The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
• CVE-2024-0248 - CVSS 4.3 (medium), 2024-02-12: The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE-2023-6029 (https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e/) in 2.3.8,…
• CVE-2023-6029 - CVSS 7.5 (high), 2024-01-15: The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does not ensure that they are documents…
• CVE-2023-6035 - CVSS 8.8 (high), 2023-12-11: The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an SQL statement via an AJAX action,…