Vulnerabilities

TI-2026-33026 CVE-2026-45209 · GHSA-9p39-xj39-27fr

WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-05-25 No fix listed CWE-862

TI-2024-10544 CVE-2024-11379 · GHSA-g7cp-j93w-4gj5

Broadcast <= 51.01 - Reflected Cross-Site Scripting

LOW 27

The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'do_check' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-12-06 No fix listed CWE-79

TI-2023-25803 CVE-2023-47664 · GHSA-9cm4-3grc-hcrr

WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview Plainview Protect Passwords.This issue affects Plainview Protect Passwords: from n/a through 1.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00372 Published 2023-11-18 No fix listed CWE-352

TI-2023-25804 CVE-2023-47665 · GHSA-9rh3-jvpx-vjch

WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in edward_plainview Plainview Protect Passwords plugin <= 1.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00404 Published 2023-11-13 No fix listed CWE-79

TI-2023-22117 CVE-2023-41693 · GHSA-vwwm-jm3p-xprh

WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-10-03 No fix listed CWE-352

TI-2023-01460 CVE-2023-1546 · GHSA-c6vc-gphj-54v8

MyCryptoCheckout < 2.124 - Reflected XSS

MEDIUM 60

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2023-05-02 Fixed in 2.124 CWE-79