Skip to content
OpenAdvisories

Vendor

eazyplugins

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpoint

    The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the `wp_ajax_pos_get_option` AJAX …

  • High 8.8

    WordPress Eazy Plugin Manager plugin <= 4.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager plugins-on-steroids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eazy Plugin Manager: from n/a through <= 4.3.0.