CVE-2025-32481

CVE-2025-32481 is a CSRF to Stored XSS vulnerability in the WordPress plugin Nino Social Connect (ninotheme). Affected range is from unspecified earlier versions up to and including 2.0. The initial data indicates the vulnerability is unpatched, with no public fix details provided. Exploitation s...

CVE-2025-32484 WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mathieu Chartier WP-Planification allows Stored XSS. This issue affects WP-Planification: from n/a through 2.3.1...

CVE-2025-32484 WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mathieu Chartier WP-Planification wp-planification allows Stored XSS.This issue affects WP-Planification: from n/a through = 2.3.1...

CVE-2025-32484

CVE-2025-32484 describes a Cross-Site Forgery to Stored Cross-Site Scripting (CSRF to Stored XSS) in the WordPress plugin WP-Planification (WP-Planning). Affected: WP-Planification

CVE-2025-32485

CVE-2025-32485: Cross-Site Request Forgery in WP Performance Pack affecting versions up to 2.5.4; CVSSv3.1 base score 4.3 (Medium). Connected sources indicate the vulnerability exists and is currently Unpatched; no exploit details provided in the documents. Affected product: WordPress WP Performa...

CVE-2025-32494 WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

CVE-2025-32496 WordPress Ultra Demo Importer plugin <= 1.0.5 - CSRF to RCE vulnerability

Cross-Site Request Forgery CSRF vulnerability in Uncodethemes Ultra Demo Importer ut-demo-importer allows Upload a Web Shell to a Web Server.This issue affects Ultra Demo Importer: from n/a through = 1.0.5...

CVE-2025-32498 WordPress VKontakte Cross-Post plugin <= 0.3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in oleglark VKontakte Cross-Post allows Stored XSS. This issue affects VKontakte Cross-Post: from n/a through 0.3.2...

CVE-2025-32498 WordPress VKontakte Cross-Post plugin <= 0.3.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in oleglark VKontakte Cross-Post vkontakte-cross-post allows Stored XSS.This issue affects VKontakte Cross-Post: from n/a through = 0.3.2...

CVE-2025-32500

CVE-2025-32500 : Codescar Radio Widget (versions up to 0.4.2) contains a CSRF flaw that enables Stored XSS. The issue affects the Codescar Radio Widget plugin and is currently Unpatched (no fix in the connected docs). CVSS v3.1 base score 7.1 (HIGH) according to the metrics, with network impact, ...

CVE-2025-32500 WordPress Codescar Radio Widget plugin <= 0.4.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sudavar Codescar Radio Widget codescar-radio-widget allows Stored XSS.This issue affects Codescar Radio Widget: from n/a through = 0.4.2...

CVE-2025-32503 WordPress Link Shield plugin <= 0.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Conti Link Shield allows Stored XSS. This issue affects Link Shield: from n/a through 0.5.4...

CVE-2025-32503

CVE-2025-32503 affects the WordPress plugin Link Shield (Link Shield) up to version 0.5.4, describing a stored Cross-Site Scripting vulnerability in input handling during web page generation. The vulnerability is listed as Cross-Site Scripting with a patch status of Unpatched in vendor/public sou...

CVE-2025-32502 WordPress ePaper Lister for Yumpu plugin <= 1.4.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in lemmentwickler ePaper Lister for Yumpu magazine-lister-for-yumpu allows Stored XSS.This issue affects ePaper Lister for Yumpu: from n/a through = 1.4.0...

CVE-2025-32505

CVE-2025-32505 is associated with the WordPress plugin MultiMailer. The connected document set confirms a vulnerability pathway described as Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) affecting MultiMailer versions up to 1.0.3. The CVSS data from the initial document i...

CVE-2025-32505 WordPress MultiMailer plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in SCAND MultiMailer scand-multi-mailer allows Stored XSS.This issue affects MultiMailer: from n/a through = 1.0.3...

CVE-2025-32518 WordPress ALD Login Page plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in hossainawlad ALD Login Page allows Stored XSS. This issue affects ALD Login Page: from n/a through 1.1...

CVE-2025-32518 WordPress ALD Login Page plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in hossainawlad ALD Login Page ald-login-page allows Stored XSS.This issue affects ALD Login Page: from n/a through = 1.1...

CVE-2025-32547 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

CVE-2025-32547 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...