10562 matches found
CVE-2025-53314 WordPress WP Optimizer plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in sh1zen WP Optimizer allows SQL Injection. This issue affects WP Optimizer: from n/a through 2.3.6...
CVE-2025-53314
CVE-2025-53314 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin WP Optimizer (sh1zen) affecting versions up to 2.3.6. The entry notes that the CSRF vulnerability enables SQL injection. The CVSS vector indicates Network attack, no privileges required, user interaction required...
CVE-2025-53313 WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in plumwd Twitch TV Embed Suite allows Stored XSS. This issue affects Twitch TV Embed Suite: from n/a through 2.1.0...
CVE-2025-53311 WordPress Navayan Subscribe plugin <= 1.13 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Amol Nirmala Waman Navayan Subscribe navayan-subscribe allows Stored XSS.This issue affects Navayan Subscribe: from n/a through = 1.13...
CVE-2025-53312
CVE-2025-53312 describes a CSRF vulnerability in the OnionBuzz WordPress plugin (versions n/a through 1.0.7) that enables stored XSS. The provided connected sources corroborate the CSRF and affected version range, but do not publish a patched version or remediation detail. Multiple entries (NVD, ...
CVE-2025-53310
CVE-2025-53310 describes a CSRF vulnerability in the WordPress plugin HidePost (
CVE-2025-53310 WordPress HidePost plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Funnnny HidePost hidepost allows Reflected XSS.This issue affects HidePost: from n/a through = 2.3.8...
CVE-2025-53308 WordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in gopiplus Image Slider With Description image-slider-with-description allows Stored XSS.This issue affects Image Slider With Description: from n/a through = 9.2...
CVE-2025-53305 WordPress WP Forum Server plugin <= 1.8.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a through = 1.8.2...
CVE-2025-53277 WordPress IS-theme-companion plugin <= 1.59 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Infigo Software IS-theme-companion weblizar-companion allows Object Injection.This issue affects IS-theme-companion: from n/a through = 1.59...
CVE-2025-53274 WordPress WP Permalink Translator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Hossin Asaadi WP Permalink Translator wp-permalink-translator allows Stored XSS.This issue affects WP Permalink Translator: from n/a through = 1.7.6...
CVE-2025-53274
CVE-2025-53274 concerns the WordPress plugin WP Permalink Translator. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that can lead to Stored XSS, affecting WP Permalink Translator versions up to 1.7.6. The provided connected documents confirm the root cause is CSRF and that the imp...
CVE-2025-53273
CVE-2025-53273 concerns the WordPress plugin Slickstream (versions n/a through 2.0.3). The vulnerability is a Cross-Site Request Forgery (CSRF) that could enable an attacker to perform unauthorized actions within a user’s authenticated session. The initial metrics indicate a CVSS v3.1 base score ...
CVE-2025-53273 WordPress Slickstream plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Slickstream Slickstream slick-engagement allows Cross Site Request Forgery.This issue affects Slickstream: from n/a through = 2.0.3...
CVE-2025-53272 WordPress Image Cleanup plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in opicron Image Cleanup allows Cross Site Request Forgery. This issue affects Image Cleanup: from n/a through 1.9.2...
CVE-2025-53272
CVE-2025-53272 : CSRF vulnerability in WordPress Image Cleanup plugin affecting versions up to 1.9.2. CVSS v3.1 base score 4.3 (Medium). Public details indicate a CSRF flaw but no exploitation status is provided in the available documents. Remediation specifics (e.g., fixed version) are not expli...
CVE-2025-53271 WordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Anton Bond Additional Order Filters for WooCommerce allows Stored XSS. This issue affects Additional Order Filters for WooCommerce: from n/a through 1.22...
CVE-2025-53271 WordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Anton Bond Additional Order Filters for WooCommerce additional-order-filters-for-woocommerce allows Stored XSS.This issue affects Additional Order Filters for WooCommerce: from n/a through = 1.22...
CVE-2025-53268 WordPress Import external attachments plugin <= 1.5.12 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in ryanpcmcquen Import external attachments allows Cross Site Request Forgery. This issue affects Import external attachments: from n/a through 1.5.12...