CVE-2025-53261

CVE-2025-53261 affects WordPress plugin WP YouTube Live (macbookandrew). Vulnerability type: Cross-Site Request Forgery (CSRF). Affected versions:

CVE-2025-53254 WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

CVE-2025-53254 WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

CVE-2025-53203 WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Cross Site Request Forgery.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.148...

CVE-2025-53197 WordPress Cookiebot plugin <= 4.5.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in cookiebot Cookiebot allows Cross Site Request Forgery. This issue affects Cookiebot: from n/a through 4.5.8...

CVE-2025-53197

CVE-2025-53197 describes a Cross‑Site Request Forgery (CSRF) vulnerability in the WordPress Cookiebot plugin, affecting versions up to and including 4.5.8. The issue permits CSRF against authenticated users, with a CVSS 3.1 base score of 4.3 (Medium) and impact limited to integrity ( LOW ) and no...

CVE-2025-53193 WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...

CVE-2025-53193

CVE-2025-53193 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Burst Statistics” by Burst Statistics B.V. Affected versions are n/a through 2.0.6. The CVSS base score is 4.3 (Medium) with network attack vector, low attack complexity, no privileges required, bu...

CVE-2025-53193 WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...

PT-2025-27214 · Acmeedesign · Wpshapere Lite

Name of the Vulnerable Software and Affected Versions: AcmeeDesign WPShapere Lite versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For AcmeeDesign WPShapere Lite versions 1.4 and earlier, update to a versio...

PT-2025-27209 · Unknown · Navayan Subscribe

Name of the Vulnerable Software and Affected Versions: Navayan Subscribe versions n/a through 1.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

PT-2025-27184 · Infigo · Is-Theme-Companion

Name of the Vulnerable Software and Affected Versions: Infigo Software IS-theme-companion versions 1.57 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Object Injection. Recommendations: For Infigo Software IS-theme-companion versions 1.57 and...

PT-2025-27168 · WordPress · Wp Youtube Live

Name of the Vulnerable Software and Affected Versions: WP YouTube Live versions 1.10.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For WP YouTube Live versions 1.10.0 and earlier, update to a version that...

PT-2025-27179 · Unknown · Opicron Image Cleanup

Name of the Vulnerable Software and Affected Versions: opicron Image Cleanup versions 1.9.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the opicron Image Cleanup, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For opicron Image...

CVE-2025-50369

A Cross-Site Request Forgery CSRF vulnerability exists in the Manage Card functionality /mcgs/admin/manage-card.php of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying...

CVE-2025-50370

CVE-2025-50370 affects Phpgurukul Medical Card Generation System 1.0, specifically the Inquiry Management endpoint /mcgs/admin/readenq.php. A CSRF flaw exists where an authenticated admin can delete inquiry records via a simple GET request without CSRF token or origin validation. This is supporte...

PT-2025-27210 · Onionbuzz · Onionbuzz

Name of the Vulnerable Software and Affected Versions: OnionBuzz versions n/a through 1.0.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Looks Awesome OnionBuzz. Recommendations: For OnionBuzz versions n/a through 1.0.7, update to a version...

WordPress WP GDPR Cookie Consent Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP GDPR Cookie Consent Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53316 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID aa421b31b5f1 Credits Skalucy Requir...

PT-2025-27181 · WordPress · Hossin Asaadi Wp Permalink Translator

Name of the Vulnerable Software and Affected Versions: Hossin Asaadi WP Permalink Translator versions 1.7.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

PT-2025-27176 · Unknown · My Wp Brand

Name of the Vulnerable Software and Affected Versions: My Wp Brand versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.1.3 and earlier, update to a version that contains a fi...