edward_plainview vulnerabilities

Products

• MyCryptoCheckout 2
• Plainview Protect Passwords 2
• Broadcast 1

Latest edward_plainview CVEs

Newest publication first

1. CVE-2026-45209 WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability

   Published 2026-05-25

   High·CVSS 7.5 EPSS 0.31%

   Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161.

2. CVE-2024-11379 Broadcast <= 51.01 - Reflected Cross-Site Scripting

   Published 2024-12-06

   Medium·CVSS 6.1 EPSS 0.33%

   The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'do_check' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject a...

3. CVE-2023-47664 WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-11-18

   High·CVSS 8.8 EPSS 0.37%

   Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview Plainview Protect Passwords.This issue affects Plainview Protect Passwords: from n/a through 1.4.

4. CVE-2023-47665 WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-11-13

   Medium·CVSS 6.1 EPSS 0.40%

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in edward_plainview Plainview Protect Passwords plugin <= 1.4 versions.

5. CVE-2023-41693 WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-10-03

   High·CVSS 8.8 EPSS 0.25%

   Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.