CVE-2025-53310 WordPress HidePost plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Funnnny HidePost hidepost allows Reflected XSS.This issue affects HidePost: from n/a through = 2.3.8...

CVE-2025-53310

CVE-2025-53310 describes a CSRF vulnerability in the WordPress plugin HidePost (

CVE-2025-53308 WordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in gopiplus Image Slider With Description image-slider-with-description allows Stored XSS.This issue affects Image Slider With Description: from n/a through = 9.2...

CVE-2025-53305 WordPress WP Forum Server plugin <= 1.8.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a through = 1.8.2...

CVE-2025-53277

CVE-2025-53277 : Infigo Software IS-theme-companion WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) that enables Object Injection in versions up to 1.57. Public metrics show CVSSv3.1 base score 8.8 (HIGH), with network attack vector, low attack complexity, no privileges requir...

CVE-2025-53277 WordPress IS-theme-companion plugin <= 1.59 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Infigo Software IS-theme-companion weblizar-companion allows Object Injection.This issue affects IS-theme-companion: from n/a through = 1.59...

CVE-2025-53274 WordPress WP Permalink Translator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hossin Asaadi WP Permalink Translator wp-permalink-translator allows Stored XSS.This issue affects WP Permalink Translator: from n/a through = 1.7.6...

CVE-2025-53274

CVE-2025-53274 concerns the WordPress plugin WP Permalink Translator. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that can lead to Stored XSS, affecting WP Permalink Translator versions up to 1.7.6. The provided connected documents confirm the root cause is CSRF and that the imp...

CVE-2025-53273 WordPress Slickstream plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Slickstream Slickstream slick-engagement allows Cross Site Request Forgery.This issue affects Slickstream: from n/a through = 2.0.3...

CVE-2025-53273

CVE-2025-53273 concerns the WordPress plugin Slickstream (versions n/a through 2.0.3). The vulnerability is a Cross-Site Request Forgery (CSRF) that could enable an attacker to perform unauthorized actions within a user’s authenticated session. The initial metrics indicate a CVSS v3.1 base score ...

CVE-2025-53271 WordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anton Bond Additional Order Filters for WooCommerce additional-order-filters-for-woocommerce allows Stored XSS.This issue affects Additional Order Filters for WooCommerce: from n/a through = 1.22...

CVE-2025-53272 WordPress Image Cleanup plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in opicron Image Cleanup allows Cross Site Request Forgery. This issue affects Image Cleanup: from n/a through 1.9.2...

CVE-2025-53271 WordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anton Bond Additional Order Filters for WooCommerce allows Stored XSS. This issue affects Additional Order Filters for WooCommerce: from n/a through 1.22...

CVE-2025-53272

CVE-2025-53272 : CSRF vulnerability in WordPress Image Cleanup plugin affecting versions up to 1.9.2. CVSS v3.1 base score 4.3 (Medium). Public details indicate a CSRF flaw but no exploitation status is provided in the available documents. Remediation specifics (e.g., fixed version) are not expli...

CVE-2025-53268 WordPress Import external attachments plugin <= 1.5.12 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryanpcmcquen Import external attachments allows Cross Site Request Forgery. This issue affects Import external attachments: from n/a through 1.5.12...

CVE-2025-53268

CVE-2025-53268 is a CSRF vulnerability in the WordPress plugin Import external attachments affecting versions

CVE-2025-53267

CVE-2025-53267 is a CSRF vulnerability in the WordPress plugin “Hide Admin Bar From Front End” affecting version 1.0.0 and earlier. The connected sources describe a Cross-Site Request Forgery issue without publicly documented exploit vectors or confirmed fixes in the provided documents. Several s...

CVE-2025-53264 WordPress ONet Regenerate Thumbnails plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Konrád Koller ONet Regenerate Thumbnails onet-regenerate-thumbnails allows Cross Site Request Forgery.This issue affects ONet Regenerate Thumbnails: from n/a through = 1.5...

CVE-2025-53263

CVE-2025-53263 describes a CSRF vulnerability in the WordPress plugin Address Autocomplete via Google for Gravity Forms (PluginsCafe), affecting versions up to 1.3.4. The issue enables cross-site request forgery with the attack surface exposed over the network and requires user interaction (UI=Re...

CVE-2025-53263 WordPress Address Autocomplete via Google for Gravity Forms plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginsCafe Address Autocomplete via Google for Gravity Forms gf-google-address-autocomplete allows Cross Site Request Forgery.This issue affects Address Autocomplete via Google for Gravity Forms: from n/a through = 1.3.4...