CVE-2025-14630

The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incorrect nonce validation on the 'saveSettings' and 'renamePost' AJAX actions. This makes it possible for unauthenticated attackers to modify...

WordPress AdminQuickbar plugin <= 1.9.3 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Lior Yeshayahu in WordPress Plugin AdminQuickbar versions = 1.9.3...

CVE-2025-39464

CVE-2025-39464 applies to WordPress AdminQuickbar plugin (versions ≤ 1.9.1) and is a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The impact is ability to execute script in the context of affected users when visiting a crafted URL, with a base CV...