Lucene search
K

WordPress DF Draggable plugin <= 1.13.2 - CSRF to Stored XSS vulnerability

🗓️ 16 Jan 2025 18:42:15Reported by SOPROBROType 
patchstack
 patchstack
🔗 patchstack.com👁 2 Views

WordPress DF Draggable plugin up to 1.13.2 has a Cross Site Request Forgery to Stored Cross Site Scripting vulnerability found by SOPROBRO.

Related
Detection
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2025-23708
16 Jan 202520:15
attackerkb
Circl
CVE-2025-23708
16 Jan 202520:19
circl
CNNVD
WordPress plugin DF Draggable 跨站请求伪造漏洞
16 Jan 202500:00
cnnvd
CVE
CVE-2025-23708
16 Jan 202520:06
cve
Cvelist
CVE-2025-23708 WordPress DF Draggable plugin <= 1.13.2 - CSRF to Stored XSS vulnerability
16 Jan 202520:06
cvelist
EUVD
EUVD-2025-3361
3 Oct 202520:07
euvd
NVD
CVE-2025-23708
16 Jan 202520:15
nvd
Positive Technologies
PT-2025-5040 · Unknown · Df Draggable
16 Jan 202500:00
ptsecurity
RedhatCVE
CVE-2025-23708
9 Jan 202608:48
redhatcve
Wordfence Blog
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 13, 2025 to January 19, 2025)
23 Jan 202515:41
wordfence
Rows per page
Vulners
Node
wordpressdf_draggableRange1.13.2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jan 2025 18:42Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.17.1
EPSS0.00125
2