PT-2025-7743 · Unknown · Simple Google Sitemap

Name of the Vulnerable Software and Affected Versions: Simple Google Sitemap versions 1.6 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For Simple Google Sitemap versions 1.6 and earlier, update to a version...

WordPress plugin Reset 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-6440 · WordPress · Admire Extra

Name of the Vulnerable Software and Affected Versions: Admire Extra plugin for WordPress versions up to, and including, 1.6 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'space' shortcode, allowing authenticated...

WordPress WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Reset vulnerability discovered by Kévin Mosbahi Mika in WordPress Plugin WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon versions = 1.6...

CVE-2025-23567

Cross-Site Request Forgery CSRF vulnerability in Tamer Ziady GDReseller gdreseller allows Stored XSS.This issue affects GDReseller: from n/a through = 1.6...

CVE-2022-29249

JavaEZ is a library that adds new functions to make Java easier. A weakness in JavaEZ 1.6 allows force decryption of locked text by unauthorized actors. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required...

CVE-2024-49247

Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through = 1.6...

CVE-2024-54290

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Fletcher Role Includer role-includer allows Reflected XSS.This issue affects Role Includer: from n/a through = 1.6...

CVE-2024-51656

Cross-Site Request Forgery CSRF vulnerability in litefeel Flash Show And Hide Box flash-show-and-hide-box allows Stored XSS.This issue affects Flash Show And Hide Box: from n/a through = 1.6...

CVE-2024-31351

Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6...

GHSA-4352-JXWG-88RM Jenkins Zoom Plugin is Missing Password Field Masking

Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access...

PT-2025-3757 · Zoom · Zoom Jenkins Marketplace Plugin

Name of the Vulnerable Software and Affected Versions: Zoom Jenkins Marketplace plugin version 1.6 and earlier Description: The issue concerns missing password field masking in the Zoom Jenkins Marketplace plugin, which may allow an unauthenticated user to conduct a disclosure of information via...

WordPress Ask Me Anything (Anonymously) plugin <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Ask Me Anything Anonymously versions = 1.6...

PT-2025-1876 · WordPress · Ask Me Anything (Anonymously) Plugin

Name of the Vulnerable Software and Affected Versions: Ask Me Anything Anonymously plugin for WordPress versions up to, and including, 1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode due to insufficient input sanitization and...

CVE-2025-23815

Cross-Site Request Forgery CSRF vulnerability in linickx root Cookie allows Cross Site Request Forgery. This issue affects root Cookie: from n/a through 1.6...

CVE-2025-23815 WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in linickx root Cookie allows Cross Site Request Forgery. This issue affects root Cookie: from n/a through 1.6...

CVE-2025-23661

CVE-2025-23661 is a CSRF vulnerability in the NV Slider WordPress plugin that can lead to Stored XSS. Affected range: NV Slider from n/a through 1.6. CVSSv3.1 base score 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). The provided documents do not include exploitation details or a remediation/patch st...

CVE-2025-23567 WordPress GDReseller plugin <= 1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tamer Ziady GDReseller gdreseller allows Stored XSS.This issue affects GDReseller: from n/a through = 1.6...

CVE-2025-23567 WordPress GDReseller plugin <= 1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tamer Ziady GDReseller gdreseller allows Stored XSS.This issue affects GDReseller: from n/a through = 1.6...

CVE-2025-23567

CVE-2025-23567 is a CSRF-to-Stored XSS in the GDReseller WordPress plugin, affecting versions up to 1.6. Red Hat and ENISA records corroborate the vulnerability and indicate an unpatched state; CVSS v3.1 base score is 7.1 (High) . The description notes CSRF to Stored XSS without details on a fixe...