7.1
High
CVE-2024-38721 Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through 2.5.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EazyDocs 2.5 | earliest → 2.5.0 | No fix stated |
Other CVEs of EazyDocs
The 5 CVEs of EazyDocs →
CVE-2023-47648
Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access…
7.5
High
CVE-2024-54376
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High
CVE-2024-38720
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EazyDocs…
6.5
Medium
CVE-2024-3999
The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high…
4.8
Medium