Skip to content
OpenAdvisories

Vendor

Yudiz Solutions

6 known vulnerabilities.

Products

Easy Email Subscription 3 WP Menu Image 1 WP Contact Form 7 DB Handler 1 WP Replicate Post 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10691

    Easy Email Subscription <= 1.3 - Cross-Site Request Forgery to Arbitrary Subscriber Deletion

    The Easy Email Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on the show_editsub_page() function. This makes it possible for unauth…

    Yudiz Solutions Easy Email Subscription Web / CMS
  • Medium 4.9
    CVE-2025-10683

    Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid

    The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ…

    Yudiz Solutions Easy Email Subscription Web / CMS
  • Medium 6.5
    CVE-2024-52485

    WordPress WP Menu Image plugin <= 2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Menu Image: from n/a through <= 2.2.

    Yudiz Solutions WP Menu Image