CVE-2025-27353 WordPress Namaste! LMS Plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.5...

CVE-2025-27355 WordPress Woocommerce – Loi Hamon Plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nicolas GRILLET Woocommerce – Loi Hamon loi-hamon allows Stored XSS.This issue affects Woocommerce – Loi Hamon: from n/a through = 1.1.0...

CVE-2025-27352 WordPress 无觅相关文章插件 plugin <= 1.0.5.7 - CSRF to Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wumii team 无觅相关文章插件 wumii-related-posts allows Stored XSS.This issue affects 无觅相关文章插件: from n/a through = 1.0.5.7...

CVE-2025-27342 WordPress WooCommerce Recargo de Equivalencia Plugin <= 1.6.24 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in josesan WooCommerce Recargo de Equivalencia woo-recargo-de-equivalencia allows Cross Site Request Forgery.This issue affects WooCommerce Recargo de Equivalencia: from n/a through = 1.6.24...

CVE-2025-27342

CVE-2025-27342: CSRF vulnerability in WordPress plugin WooCommerce Recargo de Equivalencia affects versions up to 1.6.24. The CVE description states CSRF could be triggered by authenticated or non-authenticated interactions? The initial doc lists CVSS 3.1 base score 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C...

CVE-2025-27335 WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

CVE-2025-27321 WordPress Blightly Explorer plugin <= 2.3.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Blighty Blightly Explorer blighty-explorer allows Stored XSS.This issue affects Blightly Explorer: from n/a through = 2.3.0...

CVE-2025-27318 WordPress Simple Google Sitemap Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ixiter Simple Google Sitemap simple-google-sitemap allows Cross Site Request Forgery.This issue affects Simple Google Sitemap: from n/a through = 1.6...

CVE-2025-27298 WordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-27298 WordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-27290 WordPress Select Erima Zarinpal Donate Plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in seyyed-amir Erima Zarinpal Donate erima-zarinpal-donate allows Cross Site Request Forgery.This issue affects Erima Zarinpal Donate: from n/a through = 1.0...

CVE-2025-27277

CVE-2025-27277 is a CSRF-to-stored-XSS vulnerability in the WordPress plugin “Add Linked Images To Gallery” affecting version up to 1.4. The CVE details from NVD/Wordfence indicate: vulnerable component/file: the Add Linked Images To Gallery plugin; root cause: Cross-Site Request Forgery enabling...

CVE-2025-27277 WordPress Add Linked Images To Gallery plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.This issue affects Add Linked Images To Gallery: from n/a through = 1.4...

CVE-2025-27276 WordPress Photo Gallery ( Responsive ) plugin <= 4.0 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Photo Gallery Responsive photo-gallery-pearlbells allows Privilege Escalation.This issue affects Photo Gallery Responsive : from n/a through = 4.0...

CVE-2025-27276 WordPress Photo Gallery ( Responsive ) plugin <= 4.0 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Photo Gallery Responsive photo-gallery-pearlbells allows Privilege Escalation.This issue affects Photo Gallery Responsive : from n/a through = 4.0...

PT-2025-7726 · Unknown · Erima Zarinpal Donate

Name of the Vulnerable Software and Affected Versions: Erima Zarinpal Donate versions 1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For Erima Zarinpal Donate versions 1.0 and...

CVE-2024-54959

Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery CSRF attack through the Favorites component, enabling POST-based Cross-Site Scripting XSS...

PT-2025-7622 · Unknown · A1Post.Bg Shipping For Woo

Name of the Vulnerable Software and Affected Versions: A1POST.BG Shipping for Woo versions 1.5.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Privilege Escalation. Recommendations: For versions 1.5.1 and earlier, update to a version that fixes...

CVE-2024-7141 CSRF in Gliffy

Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery CSRF flaw...

CVE-2024-13339

The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.6. This is due to missing or incorrect nonce validation on the 'debounceemailvalidator' page. This makes it possible for unauthenticated attackers to update...