Lucene search
+L

10562 matches found

CVE
CVE
•added 2025/04/04 3:59 p.m.•78 views

CVE-2025-32267

Technical details about CVE-2025-32267 are not provided in the connected documents. Public info is high‑level (CSRF in the WordPress plugin wp-to-hootsuite up to version 1.5.8). Monitor official advisories for impacted versions, impact, and remediation.

4.3CVSS7.2AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•34 views

CVE-2025-32265 WordPress JobWP plugin <= 2.3.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This issue affects JobWP: from n/a through = 2.3.9...

4.3CVSS0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•28 views

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•11 views

CVE-2025-32262 WordPress RDP Wiki Embed plugin <= 1.2.20 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Robert D Payne RDP Wiki Embed allows Cross Site Request Forgery. This issue affects RDP Wiki Embed: from n/a through 1.2.20...

4.3CVSS7.2AI score0.00153EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•6 views

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•10 views

CVE-2025-32261 WordPress Advanced All in One Admin Search by WP Spotlight <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight allows Cross Site Request Forgery. This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through 1.1.1...

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•70 views

CVE-2025-32249

CVE-2025-32249 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress DirectoryPress plugin, affecting versions up to 3.6.19 (per multiple sources). The CVE entry notes a CSRF issue; the NVD entry lists a CVSS v3.1 base score of 5.4 (Medium) with network attack vector, low integrit...

5.4CVSS5.9AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•27 views

CVE-2025-32247 WordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ABCdatos AI Content Creator ai-content-creator allows Cross Site Request Forgery.This issue affects AI Content Creator: from n/a through = 1.2.6...

5.4CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•9 views

CVE-2025-32247 WordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ABCdatos AI Content Creator allows Cross Site Request Forgery. This issue affects AI Content Creator: from n/a through 1.2.6...

5.4CVSS7.2AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•66 views

CVE-2025-32247

Based on the provided documents, no connected technical details are available for CVE-2025-32247 beyond the description of a CSRF vulnerability in ABCdatos AI Content Creator affecting versions up to 1.2.6. No exploit info, affected-versions specifics, root-cause, or remediation are provided here...

5.4CVSS7.2AI score0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•8 views

CVE-2025-32241 WordPress Official CleverReach WooCommerce Integration Plugin <= 3.4.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in CleverReach® Official CleverReach Plugin for WooCommerce allows Cross Site Request Forgery. This issue affects Official CleverReach Plugin for WooCommerce: from n/a through 3.4.3...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:58 p.m.•61 views

CVE-2025-32113

CVE-2025-32113 is a CSRF vulnerability in Libro de Reclamaciones y Quejas (Renzo Tejada) affecting version up to 0.9. The connected record notes "Libro de Reclamaciones y Quejas

7.1CVSS7.2AI score0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:58 p.m.•12 views

CVE-2025-32112 WordPress Sidebar Manager Light plugin <= 1.1.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in OTWthemes Sidebar Manager Light allows Cross Site Request Forgery. This issue affects Sidebar Manager Light: from n/a through 1.1.8...

7.1CVSS7.2AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:58 p.m.•56 views

CVE-2025-32112

CVE-2025-32112 corresponds to a CSRF vulnerability in Sidebar Manager Light (OTWthemes) affecting versions up to 1.1.8. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) indicates network access by an attacker with no privileges and user interaction required. Risk/impact are described in ...

7.1CVSS7.2AI score0.0021EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/04 1:40 p.m.•18 views

WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin 404 Image Redirection Replace Broken Images versions = 1.4...

4.3CVSS8.2AI score0.00191EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2025/04/04 7:15 a.m.•17 views

CVE-2025-2797

The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'wofficehandleuserapprovalactions' function. This makes it possible for unauthenticated attackers to approve...

5.4CVSS5.6AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•38 views

PT-2025-15028 · Unknown · Axew3 Wp W3All Phpbb

Name of the Vulnerable Software and Affected Versions: axew3 WP w3all phpBB versions n/a through 2.9.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For axew3 WP w3all phpBB versions n/a through 2.9.2, update t...

4.3CVSS5.6AI score0.00153EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•24 views

PT-2025-15032 · Wedevs · Wedevs Wp Project Manager

Name of the Vulnerable Software and Affected Versions: weDevs WP Project Manager versions prior to 2.6.23 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For weDevs WP Project...

8.8CVSS9AI score0.00175EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•26 views

PT-2025-14910 · Otwthemes · Otwthemes Sidebar Manager Light

Name of the Vulnerable Software and Affected Versions: OTWthemes Sidebar Manager Light versions 1.1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricki...

7.1CVSS7.5AI score0.0021EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•20 views

WordPress plugin WP Project Manager has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.6AI score0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder