Extension WordPress
Vulnérabilités Easy PayPal Events & Tickets
Cette page rassemble les failles publiées pour Easy PayPal Events & Tickets, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Easy PayPal Events & Tickets
3 fiches
Easy PayPal Events <= 1.2.2 – Cross-Site Request Forgery
The Easy PayPal Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the wpplugin_paypal_button_load_scripts() function. This makes it possible for…
*-1.2.2
1.3
07/05/2025
Easy PayPal Events <= 1.2.1 – Cross-Site Request Forgery to Arbitrary Post Deletion
The Easy PayPal Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the wpeevent_plugin_buttons() function. This makes it possible…
*-1.2.1
1.2.2
24/09/2024
Easy PayPal Events <= 1.1.6 – Reflected Cross-Site Scripting via Page
The Easy PayPal Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-1.1.1
1.1.7
25/05/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.