10562 matches found
CVE-2025-32612
CVE-2025-32612 concerns the WordPress plugin User Session Synchronizer. Connected documentation confirms a CSRF to Stored XSS scenario affecting User Session Synchronizer versions up to 1.4.0, with the CVE rated as HIGH (CVSS 3.1: 7.1 base score: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). The Wordfenc...
CVE-2025-32616 WordPress Nimbata Call Tracking plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.7.4...
CVE-2025-32617 WordPress Multiple Location Google Map plugin <= 1.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Ydesignservices Multiple Location Google Map multiple-location-google-map allows Stored XSS.This issue affects Multiple Location Google Map: from n/a through = 1.1...
CVE-2025-32621 WordPress WP Map Route Planner plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Vsourz Digital WP Map Route Planner allows Cross Site Request Forgery. This issue affects WP Map Route Planner: from n/a through 1.0.0...
CVE-2025-32621 WordPress WP Map Route Planner plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Vsourz Digital WP Map Route Planner wp-map-route-planner allows Cross Site Request Forgery.This issue affects WP Map Route Planner: from n/a through = 1.0.0...
CVE-2025-32621
CVE-2025-32621 (WP Map Route Planner) describes a Cross-Site Request Forgery leading to Stored Cross-Site Scripting in WP Map Route Planner versions
CVE-2025-32623 WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in plainware PlainInventory z-inventory-manager allows Stored XSS.This issue affects PlainInventory: from n/a through = 3.1.9...
CVE-2025-32624
CVE-2025-32624 (CZATER.pl – live chat i telefon) is a missing authorization vulnerability that enables Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Czater.pl – live chat i telefon. The Wordfence vulnerability entry explicitly associates CVE-2025-32624 with Cza...
CVE-2025-32641 WordPress Anant Addons for Elementor plugin <= 1.1.5 - CSRF to Arbitrary Plugin Installation vulnerability
Cross-Site Request Forgery CSRF vulnerability in anantaddons Anant Addons for Elementor allows Cross Site Request Forgery. This issue affects Anant Addons for Elementor: from n/a through 1.1.5...
CVE-2025-32644
IP2Location World Clock (WordPress plugin) contains a CSRF to Stored XSS vulnerability, affecting versions up to 1.1.9. The CVE entry lists CVE-2025-32644 with a CVSSv3.1 base score of 7.1 (HIGH) and a Network attack vector, requiring user interaction. The vulnerability affects the plugin as depl...
CVE-2025-32659 WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro for WooCommerce allows Stored XSS. This issue affects FraudLabs Pro for WooCommerce: from n/a through 2.22.7...
CVE-2025-32659 WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.8 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Stored XSS.This issue affects FraudLabs Pro for WooCommerce: from n/a through = 2.22.8...
CVE-2025-32661 WordPress Interactive US Map plugin <= 2.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in WP Map Plugins Interactive US Map allows Stored XSS. This issue affects Interactive US Map: from n/a through 2.7...
CVE-2025-32664 WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through = 1.0.15...
CVE-2025-32667
CVE-2025-32667 describes a CSRF to Stored XSS in Doppler Forms (WordPress plugin) affecting Doppler Forms versions up to 2.4.5 (from n/a to 2.4.5). Connected document confirms the issue and impact but does not provide a published fix version or remediation steps. Technical details such as affecte...
CVE-2025-32669
CVE-2025-32669 describes a CSRF-to-Stored XSS in the WordPress plugin set “Mergado Pack.” The connected documents confirm the impact is stored XSS triggered via CSRF and that affected software is Mergado Pack up to version 4.1.1 . Technical details in the connected sources identify the vulnerabil...
CVE-2025-32669 WordPress Mergado Pack plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Stored XSS.This issue affects Mergado Pack: from n/a through = 4.2.1...
CVE-2025-32678 WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats allows Cross Site Request Forgery. This issue affects WP Show Stats: from n/a through 1.5...
CVE-2025-32679
CVE-2025-32679 is a CSRF vulnerability in the WordPress plugin User Registration Using Contact Form 7 (affected through version 2.2, with n/a as starting version). The issue is documented as a Cross-Site Forgery vulnerability, and according to Wordfence Intelligence, the patch status is Unpatched...
