CVE-2025-47517 WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.4.5...

CVE-2025-47517 WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal allows Stored XSS. This issue affects Accept Donations with PayPal: from n/a through 1.4.5...

CVE-2025-47491 WordPress Contact Form Widget plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.4.6...

CVE-2025-47491

CVE-2025-47491 describes a CSRF vulnerability in the WordPress plugin Contact Form Widget (A WP Life Contact Form Widget), affecting versions up to 1.4.6. The CVSS v3.1 base score is 7.4 (HIGH) with UI required and no confidentiality/integrity impact (I=I, A=N, C=H). Exploitation details are not ...

CVE-2025-47473

CVE-2025-47473 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin PW WooCommerce Bulk Edit (PW WooCommerce Bulk Edit). Affected versions are up to 2.134 (from n/a through 2.134). The CVSS base score is 5.4 (Medium), with attack vector Network, attack complexity Lo...

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

CVE-2025-47468 WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

CVE-2025-47451 WordPress Product Quantity Dropdown For Woocommerce plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through = 1.2...

CVE-2025-47447 WordPress Cool Author Box plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Cross Site Request Forgery.This issue affects Cool Author Box: from n/a through = 3.0.0...

WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Snurkeburk, SashaRyba in WordPress Plugin WP Compress versions = 6.30.30...

WordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Seznam Webmaster versions = 1.4.7...

PT-2025-20104 · Pimwick · Pw Woocommerce Bulk Edit

Name of the Vulnerable Software and Affected Versions: pimwick PW WooCommerce Bulk Edit versions prior to 2.134 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

PT-2025-20171 · Unknown · Daext Soccer Live Scores

Name of the Vulnerable Software and Affected Versions: DAEXT Soccer Live Scores versions 1.0.0 through 1.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...

PT-2025-20101 · Unknown · Gpt3 Ai Content Writer

Name of the Vulnerable Software and Affected Versions: GPT3 AI Content Writer versions 1.9.14 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the GPT3 AI Content Writer, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.9.1...

PT-2025-20083 · Unknown · Hossni Mubarak Cool Author Box

Name of the Vulnerable Software and Affected Versions: Hossni Mubarak Cool Author Box versions prior to 3.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions prior to 3.0.0, update to version 3.0...

PT-2025-20173 · Unknown · Syed Balkhi Beacon Lead Magnets/Lead Capture

Name of the Vulnerable Software and Affected Versions: Syed Balkhi Beacon Lead Magnets and Lead Capture versions 1.5.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user...

PT-2025-20156 · Unknown · Truebooker

Name of the Vulnerable Software and Affected Versions: TrueBooker versions 1.0.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.0.7 and earlier, update to a...

PT-2025-20227 · Unknown · Moloni Contribuinte Checkout

Name of the Vulnerable Software and Affected Versions: Moloni Contribuinte Checkout versions n/a through 2.0.02 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-20097 · WordPress · Rustaurius Ultimate Wp Mail

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate WP Mail versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Rustaurius...