Vulnerabilities

TI-2025-38439 CVE-2025-62117 · GHSA-m5jf-m4cj-q3cw

WordPress EasyIndex plugin <= 1.1.1704 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 EasyIndex easyindex allows Cross Site Request Forgery.This issue affects EasyIndex: from n/a through <= 1.1.1704.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00116 Published 2025-12-31 No fix listed CWE-352

TI-2025-09460 CVE-2025-10310 · GHSA-65rc-5f67-pccj

Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

LOW 30

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lac…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00357 Published 2025-10-15 No fix listed CWE-89

Vulnerabilities

Filters

WordPress EasyIndex plugin <= 1.1.1704 - Cross Site Request Forgery (CSRF) vulnerability

Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection