10423 matches found
CVE-2025-24636 WordPress MachForm Shortcode plugin <= 1.4.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Rick Laymance MachForm Shortcode machform-shortcode allows Stored XSS.This issue affects MachForm Shortcode: from n/a through = 1.4.1...
CVE-2025-24636
CVE-2025-24636 : WordPress MachForm Shortcode (Laymance Technologies LLC) has a CSRF to Stored XSS vulnerability affecting MachForm Shortcode versions up to 1.4.1. The vulnerability is rated with CVSSv3.1 base score 7.1 (HIGH). Public references indicate the issue exists in the plugin from n/a th...
CVE-2025-24594 WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.7 - CSRF to Broken Access Control vulnerability
Missing Authorization vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Linet ERP-Woocommerce Integration: from n/a through = 3.5.7...
CVE-2025-24594 WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.7 - CSRF to Broken Access Control vulnerability
Missing Authorization vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Linet ERP-Woocommerce Integration: from n/a through = 3.5.7...
CVE-2025-24562
CVE-2025-24562 concerns the WordPress plugin KBucket by Optimal Access Inc. It is a CSRF to Stored XSS vulnerability affecting KBucket versions up to 4.1.6 . The CVSS 3.1 base vector references network attack, low attack complexity, no privileges, and user interaction required, with a base score ...
CVE-2025-24562 WordPress KBucket plugin <= 4.1.6 - CSRF to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery CSRF vulnerability in Optimal Access KBucket kbucket allows Stored XSS.This issue affects KBucket: from n/a through = 4.1.6...
CVE-2025-24572
The CVE-2025-24572 entry concerns the WordPress plugin WP Fast Total Search (Epsiloncool) with versions up to 1.78.258 affected by a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is a CSRF weakness in the plugin’s handling of requests, allowing unauthorized actions to be perform...
CVE-2025-24546 WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through = 1.0.9...
WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Call Now Button versions = 1.4.13...
WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.7 - CSRF to Broken Access Control vulnerability
CSRF to Broken Access Control vulnerability discovered by Mika in WordPress Plugin Linet ERP-Woocommerce Integration versions = 3.5.7...
WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Plugin Radius Blocks versions = 2.1.2...
WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Khang Duong in WordPress Plugin Counter Box versions = 2.0.5...
WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin FluentSMTP versions = 2.2.80...
WordPress plugin Ultimate Coming Soon & Maintenance 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2025-5534 · Wow Company · Sticky Buttons
Name of the Vulnerable Software and Affected Versions: Wow-Company Sticky Buttons versions through 4.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...
CVE-2025-22768
CVE-2025-22768 – CSRF in the Rocket Media Library Mime Type WordPress plugin enables Stored XSS in versions up to 2.1.0. CVSS v3.1 base score 7.1 (HIGH). Exploitation details are not provided in the connected documents; remediation details in the sources indicate a fix beyond 2.1.0, but the exact...
Jenkins plugins Multiple Vulnerabilities (2025-01-22)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins OpenId Connect Authentication Plugin 4.452.v2849bd3945fa and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as...
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method...
GHSA-WH3H-J8WP-6P42 CSRF vulnerability in Jenkins Azure Service Fabric Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method...
