CVE-2021-24344: Easy Preloader Project Easy Preloader

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues

Affected products

• Easy Preloader Project Easy Preloader: up to and including 1.0.0

Published 2021-06-07. Last modified 2026-06-17.