CVEs we hold for Easy

Records whose assigning authority named Easy as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9232Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information…easyappointments Easy Appointments

CVE-2026-87966Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDORUnknown Easy Appointments

CVE-2026-87965Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link TokenUnknown Easy Appointments

CVE-2026-8789Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletioneasyappointments Easy Appointments

CVE-2026-85123Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type ConfusionUnknown Easy Form Builder by WhiteStudio

CVE-2026-85122Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type ConfusionUnknown Easy Form Builder by WhiteStudio

CVE-2026-81892EasyAdmin custom-action dispatcher bypasses access_control on other routesEasyCorp EasyAdminBundle

CVE-2026-81798WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerabilityEasy Appointments

CVE-2026-61946WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerabilityEasy Appointments

CVE-2026-59547WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerabilityEasy Payment Payment Gateway for PayPal on WooCommerce

CVE-2026-54087EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageFieldEasyCorp EasyAdminBundle

CVE-2026-45221Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL PathEASYBYTE Software Konga

CVE-2026-39513WordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerabilityEasy Appointments

CVE-2026-3786EasyCMS Request Parameter RbacuserAction.class.php sql injectionn/a EasyCMS

CVE-2026-3785EasyCMS Request Parameter RbacnodeAction.class.php sql injectionn/a EasyCMS

CVE-2026-2262Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST APIeasyappointments Easy Appointments

CVE-2026-19406Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments ListingUnknown Easy Appointments

CVE-2026-15958Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAXUnknown Easy Integration for Dropbox

CVE-2026-15253Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment TitleUnknown Easy Media Replace

CVE-2026-14831Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration BypassUnknown Easy Booking

CVE-2026-14226Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments ListingUnknown Easy Appointments

CVE-2026-14225Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist BypassUnknown Easy Appointments

CVE-2026-14224Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDORUnknown Easy Appointments

CVE-2026-14223Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDORUnknown Easy Appointments

CVE-2026-14222Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing AuthorizationUnknown Easy Appointments

CVE-2026-14221Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing AuthorizationUnknown Easy Appointments

CVE-2026-14188Easy Appointments < 3.12.28 - Contributor+ Customer Data DisclosureUnknown Easy Appointments

CVE-2026-11992Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulationeasyappointments Easy Appointments

CVE-2026-1105EasyCMS UserAction.class.php sql injectionn/a EasyCMS

CVE-2025-63023WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.0.53 - Broken Access Control vulnerabilityEasy Payment Payment Gateway for PayPal on WooCommerce

CVE-2025-5114easysoft zentaopms Editor index.php edit deserializationeasysoft zentaopms

CVE-2025-49398WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerabilityEasy Appointments

CVE-2025-47609WordPress EasyMe Connect plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityeasymebiz EasyMe Connect

CVE-2025-11457EasyCommerce – AI-Powered, Blazing-Fast & Beautiful WordPress Ecommerce Plugin 0.9.0-beta2 - 1.8.2 - Unauthenticated…EasyCommerce – AI-Powered WordPress Ecommerce Plugin to…

CVE-2024-7082easy-table-of-contents < 2.0.68 - Editor+ Stored XSSUnknown Easy Table of Contents

CVE-2024-6334Easy Table of Contents < 2.0.67 - Editor+ Stored XSSUnknown Easy Table of Contents

CVE-2024-5573Easy Table of Contents < 2.0.66 - Admin+ Stored XSSUnknown Easy Table of Contents

CVE-2024-5057WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerabilityEasy Digital Downloads

CVE-2024-43997WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg…easy.jobs EasyJobs

CVE-2024-43162WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerabilityEasy Digital Downloads

CVE-2024-3628EasyEvent <= 1.0.0 - Admin+ Stored XSSUnknown EasyEvent

CVE-2024-32100WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerabilityEasy Digital Downloads

CVE-2024-3163Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRFUnknown Easy Property Listings

CVE-2024-31293WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityEasy Digital Downloads

CVE-2024-31113WordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerabilityEasy Digital Downloads

CVE-2024-3081EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scriptingEasyCorp EasyAdmin

CVE-2024-30526WordPress Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin <= 6.5.6 - Cross Site Request Forgery…Easy Social Feed

CVE-2024-30180WordPress Easy Social Feed plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityEasy Social Feed

CVE-2024-2869Easy Property Listings <= 3.5.3 - Admin+ Stored XSSUnknown Easy Property Listings

CVE-2024-2844Easy Appointments <= 3.11.18 - Insufficient Authorizationeasyappointments Easy Appointments

CVE-2024-2842Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scriptingeasyappointments Easy Appointments

CVE-2024-13443Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeeasypromosapp Easypromos Plugin

CVE-2024-1219Easy Social Feed < 6.5.6 - Contributor+ Stored XSSUnknown Easy Social Feed

CVE-2024-11215Path traversal vulnerability in EasyPHPEasyPHP web server

CVE-2024-0546EasyFTP LIST Command denial of servicen/a EasyFTP

CVE-2024-0433Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_cardeasynolo Ecommerce Fabrick

CVE-2024-0432Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_delete_cardeasynolo Ecommerce Fabrick

CVE-2024-0431Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_cardeasynolo Ecommerce Fabrick

CVE-2023-7089Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVGUnknown Easy SVG Allow

CVE-2023-6843easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings UpdateUnknown easy.jobs- Best Recruitment Plugin for Job Board…

CVE-2023-53944EasyPHP Webserver 14.1 Path Traversal via Directory Traversal SequencesEasyPHP Webserver

CVE-2023-53941EasyPHP Webserver 14.1 Remote Code ExecutionEasyPHP Webserver

CVE-2023-51684WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)Easy Digital Downloads – Sell Digital Files (eCommerce…

CVE-2023-5134Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcodeeasyregistrationforms Easy Registration Forms

CVE-2023-5108Easy Newsletter Signups <= 1.0.4 - Admin+ SQLiUnknown Easy Newsletter Signups

CVE-2023-4925Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site ScriptingUnknown Easy Forms for Mailchimp

CVE-2023-46779WordPress EasyRecipe Plugin <= 3.5.3251 is vulnerable to Cross Site Request Forgery (CSRF)EasyRecipe

CVE-2023-38055A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38054A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38053A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38052A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38051A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38050A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38049A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38048A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0easyappointments

CVE-2023-38047A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0.easyappointments

CVE-2023-3800EasyAdmin8 File Upload Module index.html unrestricted uploadn/a EasyAdmin8

CVE-2023-37989WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerabilityEasyship WooCommerce Shipping Rates

CVE-2023-3767OS command injection on EasyPHP WebserverEasyPHP Webserver

CVE-2023-34210SQL Injection in EasyUse MailHunter UltimateEasyUse Digital Technology MailHunter Ultimate

CVE-2023-34209Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter UltimateEasyUse Digital Technology MailHunter Ultimate

CVE-2023-34208Path Traversal in EasyUse MailHunter UltimateEasyUse Digital Technology MailHunter Ultimate

CVE-2023-34207Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter UltimateEasyUse Digital Technology MailHunter Ultimate

CVE-2023-3290A BOLA vulnerability in POST /customers in EasyAppointments < 1.5.0easyappointments

CVE-2023-3289A BOLA vulnerability in POST /services in EasyAppointments < 1.5.0easyappointments

CVE-2023-3288A BOLA vulnerability in POST /providers in EasyAppointments < 1.5.0easyappointments

CVE-2023-3287A BOLA vulnerability in POST /admins in EasyAppointments < 1.5.0easyappointments

CVE-2023-3286A BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.0easyappointments

CVE-2023-3285A BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.0easyappointments

CVE-2023-32498WordPress Easy Form by AYS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)Easy Form by AYS

CVE-2023-31182EasyTor Applications – Authorization BypassEasyTor Applications

CVE-2023-30869WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege EscalationEasy Digital Downloads

CVE-2023-2518Easy Forms for Mailchimp < 6.8.9 - Reflected XSSUnknown Easy Forms for Mailchimp

CVE-2023-23489no title heldn/a Easy Digital Downloads WordPress Plugin

CVE-2023-1325Easy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSSUnknown Easy Forms for Mailchimp

CVE-2023-1324Easy Forms for MailChimp < 6.8.8 - Reflected XSSUnknown Easy Forms for Mailchimp

CVE-2023-1323Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSSUnknown Easy Forms for Mailchimp

CVE-2023-0830EasyNAS backup.pl system os command injectionn/a EasyNAS

CVE-2023-0380Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSSUnknown Easy Digital Downloads

CVE-2023-0375Easy Affiliate Links < 3.7.1 - Contributor+ Stored XSSUnknown Easy Affiliate Links

CVE-2023-0275Easy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSSUnknown Easy Accept Payments for PayPal

CVE-2022-4754Easy Social Box <= 4.1.2 - Contributor+ Stored XSS via ShortcodeUnknown Easy Social Box / Page Plugin

CVE-2022-4668Easy Appointments < 3.11.2 - Contributor+ Stored XSS in ShortcodeUnknown Easy Appointments

CVE-2022-4628Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in ShortcodeUnknown Easy PayPal Buy Now Button

CVE-2022-4577Easy Testimonials < 3.9.3 - Contributor+ Stored XSSUnknown Easy Testimonials

CVE-2022-4576Easy Bootstrap Shortcode <= 4.5.4 - Contributor+ Stored XSSUnknown Easy Bootstrap Shortcode

CVE-2022-4487Easy Accordion < 2.2.0 - Contributor+ Stored XSSUnknown Easy Accordion

CVE-2022-4474Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSSUnknown Easy Social Feed

CVE-2022-3937Easy Video Player < 1.2.2.3 - Contributor+ Stored XSSUnknown Easy Video Player

CVE-2022-3906Easy Form Builder < 3.4.0 - Admin+ Stored XSSUnknown Easy Form Builder

CVE-2022-3771easyii CMS File Upload Management Upload.php file unrestricted uploadeasyii CMS

CVE-2022-3600Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV InjectionUnknown Easy Digital Downloads

CVE-2022-35223EasyUse MailHunter Ultimate - Deserialization of Untrusted DataEasyUse MailHunter Ultimate

CVE-2022-33900WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerabilityEasy Digital Downloads

CVE-2022-3334Easy WP SMTP < 1.5.0 - Admin+ PHP Objection InjectionUnknown Easy WP SMTP

CVE-2022-25931Directory Traversaln/a easy-static-server

CVE-2022-2387Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRFUnknown Easy Digital Downloads – Simple eCommerce for…

CVE-2022-2379Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST APIUnknown Easy Student Results

CVE-2022-2378Easy Student Results <= 2.2.8 - Reflected Cross-Site ScriptingUnknown Easy Student Results

CVE-2022-2355Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRFUnknown Easy Username Updater

CVE-2022-1964Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVGUnknown Easy SVG Support

CVE-2022-1395Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site ScriptingUnknown Easy FAQ with Expanding Text

CVE-2022-0887Easy Social Icons < 3.1.4 - Admin+ SQL InjectionUnknown Easy Social Icons

CVE-2022-0840Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add iconUnknown Easy Social Icons

CVE-2022-0728Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site ScriptingUnknown Easy Smooth Scroll Links

CVE-2022-0707Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRFUnknown Easy Digital Downloads – Simple eCommerce for…

CVE-2022-0706Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site ScriptingUnknown Easy Digital Downloads – Simple eCommerce for…

CVE-2022-0360WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site ScriptingUnknown Easy Drag And drop All Import : WP Ultimate CSV…

CVE-2021-46780Easy Google Maps < 1.9.32 - Reflected Cross-Site ScriptingUnknown Easy Google Maps

CVE-2021-39354Easy Digital Downloads <= 2.11.2 Authenticated Reflected Cross-Site ScriptingEasy Digital Downloads

CVE-2021-39353Easy Registration Forms <= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site ScriptingEasy Registration Forms

CVE-2021-25120Easy Social Feed < 6.2.7 - Reflected Cross-Site ScriptingUnknown Easy Social Feed – Social Photos Gallery – Post…

CVE-2021-24985Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site ScriptingUnknown Easy Forms for Mailchimp

CVE-2021-24736Shared Files < 1.6.57 - Admin+ Stored Cross-Site ScriptingUnknown Easy Download Manager and File Sharing Plugin with…

CVE-2021-24699Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site ScriptingUnknown Easy Media Download

CVE-2021-24576Easy Accordion < 2.0.22 - Authenticated Stored XSSUnknown Easy Accordion – Best Accordion FAQ Plugin for…

CVE-2021-24413Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site ScriptingUnknown Easy Twitter Feed

CVE-2021-24394Easy Testimonial Manager <= 1.2.0 - Authenticated SQL InjectionUnknown Easy Testimonial Manager

CVE-2021-24344Easy Preloader <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)Unknown Easy Preloader

CVE-2021-24224Easy Form Builder <= 1.0 - Authenticated Arbitrary File UploadUnknown Easy Form Builder

CVE-2021-24168Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)Unknown Easy Contact Form Pro

CVE-2020-7361ZenTao Pro Command InjectionEasyCorp ZenTao Pro

CVE-2020-5262GitHub personal access token leaking into temporary EasyBuild (debug) logseasybuilders easybuild-framework

CVE-2020-37217Easy2Pilot 7 Cross-Site Request Forgery via admin.phpEasy2Pilot

CVE-2020-36534easyii CMS out cross-site request forgeryeasyii CMS

CVE-2019-25474Easy MP3 Downloader 4.7.8.8 Denial of Service Buffer OverflowUnknown Easy MP3 Downloader Denial of Service

CVE-2019-25273Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service PathEasy-Hide-Ip IP

CVE-2018-25301Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer OverflowEasy MPEG to DVD Burner

CVE-2015-10126Easy2Map Photos Plugin sql injectionn/a Easy2Map Photos Plugin

CVE-2011-10005EasyFTP MKD Command buffer overflown/a EasyFTP

150 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.