CVE-2025-23806

CVE-2025-23806 describes a CSRF vulnerability in ThemeFarmer Ultimate Subscribe (ultimate-subscribe) that enables Reflected XSS, affecting Ultimate Subscribe versions up to 1.3. The description and Red Hat entry confirm the cross-site request forgery context and XSS impact; no public exploit deta...

CVE-2024-11923

CVE-2024-11923 describes a data disclosure in Fortra Application Hub (formerly Helpsystems One) where, under certain log settings, the IAM or CORE service logs credentials in the iam logfile prior to version 1.3. Affected component: Fortra Application Hub IAM/CORE logging workflow; issue arises f...

PT-2025-1715 · Fortra · Fortra Application Hub

Name of the Vulnerable Software and Affected Versions: Fortra Application Hub versions prior to 1.3 Description: The issue concerns the logging of credentials in the iam logfile under certain log settings. This occurs in the IAM or CORE service of Fortra Application Hub. Recommendations: For...

CVE-2025-23692

Cross-Site Request Forgery CSRF vulnerability in artanik Slider for Writers slider-for-writers allows Stored XSS.This issue affects Slider for Writers: from n/a through = 1.3...

CVE-2025-23660

Cross-Site Request Forgery CSRF vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through = 1.3...

CVE-2025-23796 WordPress Easy Portfolio plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tushar Patel Easy Portfolio easy-portfolio allows Stored XSS.This issue affects Easy Portfolio: from n/a through = 1.3...

CVE-2025-23660 WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3...

CVE-2025-23577

CVE-2025-23577 describes a CSRF-to-Stored XSS issue in Word Freshener (WordPress plugin) affecting versions from n/a through 1.3. Public sources (RH CVE, ENISA EUVD, and Wordfence report) corroborate the existence of the CSRF path enabling stored XSS, but do not provide definitive vector details ...

CVE-2025-23577 WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3...

CVE-2025-23577 WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: from n/a through = 1.3...

WordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Ultimate Subscribe versions = 1.3...

WordPress Easy Portfolio plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Easy Portfolio versions = 1.3...

WordPress Slider for Writers plugin <= 1.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Slider for Writers versions = 1.3...

WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

CSRF to Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin MFPlugin versions = 1.3...

WordPress WP Login Attempt Log plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WP Login Attempt Log versions = 1.3...

PT-2025-4949 · Unknown · Sourov Amin Word Freshener

Name of the Vulnerable Software and Affected Versions: Sourov Amin Word Freshener versions 1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a w...

WordPress plugin Word Freshener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... WordPress plugin...

WordPress plugin Easy Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-5027 · Unknown · Slider For Writers

Name of the Vulnerable Software and Affected Versions: Slider for Writers versions n/a through 1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2025-22576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcus Downing Site PIN site-pin allows Reflected XSS.This issue affects Site PIN: from n/a through = 1.3...