Brightvesseldev vulnerabilities

5 vulnerabilities

Known vulnerabilities in Brightvesseldev products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

Products

3
6.3CVE-2022-49745starpluginseasy_age_verify+1239
EPSS score
0.44%
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.6.5CVE-2024-50469brightvesseldevtextboxes+1
EPSS score
0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through <= 0.1.3.1.7.2CVE-2026-84848brightvesseldevquick event manager+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.7.5CVE-2026-84847brightvesseldevquick event manager+1
EPSS score
0.35%
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.6.5CVE-2026-84849brightvesseldevpre-orders for woocommerce+1
EPSS score
0.29%
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.