WordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by LVT-tholv2k in WordPress Plugin Ajar in5 Embed versions = 3.1.5...

CVE-2025-47551

Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...

CVE-2025-47551

Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...

CVE-2025-47551 WordPress Wiki Embed plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed allows Cross Site Request Forgery. This issue affects Wiki Embed: from n/a through 1.4.6...

CVE-2025-47551

CVE-2025-47551 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Wiki Embed plugin, affecting versions up to 1.4.6. The root cause is CSRF vulnerability leading to unauthorized settings changes. The CVSS v3.1 score is 4.3 (Medium). A fix is available in newer plugin ver...

CVE-2025-47551 WordPress Wiki Embed plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...

WordPress Plugin Wiki: Embed – Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-20164 · Unknown · Ctltwp Wiki Embed

Name of the Vulnerable Software and Affected Versions: ctltwp Wiki Embed versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.6 and...

CVE-2025-47551: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ctltwp Wiki Embed wiki-embed allows Cross Site Request Forgery.This issue affects Wiki Embed: from n/a through = 1.4.6...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.2-1257) +45 more potentially affected by CVE-2025-31651 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.5)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.2-1257) +45 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.5)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-31650 Source...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31651 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31651 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31651 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.apiverse:apipulse (1.0.1), ai.chat2db.excel:easyexcel-plus-test (0.0.1) +2845 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.76, <=9.0.102)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.76, =6.2.2, =2.3.0, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-31650 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-31650 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-31651 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-31651 Source...