EUVD-2025-22491

Malicious code in bioql PyPI...

WordPress Affiliate Plus Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress Affiliate Plus, which stems from missing or incorrect random number validation, and can be exploited by an...

CVE-2025-7690

The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'affiplussettings' page. This makes it possible for unauthenticated attackers to perform an unauthorized...

CVE-2025-7690 Affiliate Plus <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'affiplussettings' page. This makes it possible for unauthenticated attackers to perform an unauthorized...

CVE-2025-7690

CVE-2025-7690 affects the WordPress Affiliate Plus plugin up to version 1.3.2, with a Cross-Site Request Forgery vulnerability caused by missing/incorrect nonce validation on the affiplus_settings page. This can allow unauthenticated attackers to trigger actions on behalf of an administrator if t...

WordPress Plugin Affiliate Plus has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress Affiliate Plus, which stems from missing or incorrect random number validation, and can be exploited by an...

CVE-2025-7690: Cross-Site Request Forgery (CSRF)

The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'affiplussettings' page. This makes it possible for unauthenticated attackers to perform an unauthorized...

PT-2025-30654 · WordPress · Affiliate Plus

Name of the Vulnerable Software and Affected Versions: Affiliate Plus plugin for WordPress versions up to and including 1.3.2 Description: The Affiliate Plus plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the affiplus settings pag...