Easymodal Project Easy Modal vulnerabilities

2 vulnerabilities

Known vulnerabilities in Easymodal Project Easy Modal, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2017-12947easymodal_projecteasy_modal+1
EPSS score
1.26%
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.7.2CVE-2017-12946easymodal_projecteasy_modal+1
EPSS score
1.26%
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.