ezoic vulnerabilities

Products

• Ezoic 3
• Ezoic (WordPress plugin) 2
• ampedsense 1
• AmpedSense – AdSense Split Tester 1

Latest ezoic CVEs

Newest publication first

1. CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability

   Published 2026-08-18

   High·CVSS 7.5 EPSS 0.49%

   Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.

2. CVE-2023-25476 WordPress AmpedSense – AdSense Split Tester Plugin <= 4.68 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-10-18

   Medium·CVSS 6.1 EPSS 0.38%

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ezoic AmpedSense – AdSense Split Tester plugin <= 4.68 versions.

3. CVE-2022-41315 WordPress Ezoic plugin <= 2.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

   Published 2022-11-17

   Medium·CVSS 4.8 EPSS 0.43%

   Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.

4. CVE-2022-41132 WordPress Ezoic plugin <= 2.8.8 - Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability

   Published 2022-11-17

   Medium·CVSS 6.1 EPSS 0.45%

   Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.