CVE-2025-31402 WordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller newsboard allows Stored XSS.This issue affects NewsBoard Post and RSS Scroller: from n/a through = 1.2.12...

CVE-2025-31402 WordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller newsboard allows Stored XSS.This issue affects NewsBoard Post and RSS Scroller: from n/a through = 1.2.12...

CVE-2025-31402

CVE-2025-31402 affects the NewsBoard Post and RSS Scroller WordPress plugin (affected versions: from n/a through 1.2.12). The issue is a Cross-Site Request Forgery that enables Stored Cross-Site Scripting. CVSSv3.1 base score is 7.1 (HIGH), with network attack vector, no privileges required, user...

CVE-2025-31401

CVE-2025-31401: MMX – Make Me Christmas plugin contains a CSRF to Stored XSS vulnerability affecting versions up to 1.0.0. The CVE’s base metrics show CVSS 3.1 with a base score of 7.1 (HIGH); attacker vector is NETWORK, with LOW confidentiality/integrity/availability impacts and user interaction...

CVE-2025-31404 WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wladyslaw Madejczyk AF Tell a Friend af-tell-a-friend allows Stored XSS.This issue affects AF Tell a Friend: from n/a through = 1.4...

CVE-2025-31404 WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wladyslaw Madejczyk AF Tell a Friend allows Stored XSS. This issue affects AF Tell a Friend: from n/a through 1.4...

CVE-2025-32476 WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueinstyle Advanced Tag Lists advanced-tag-list allows Stored XSS.This issue affects Advanced Tag Lists: from n/a through = 1.2...

CVE-2025-32476

CVE-2025-32476 is a CSRF-to-stored XSS issue in the WordPress plugin Advanced Tag Lists (affected: versions up through 1.2). The vulnerability is described as Cross-Site Request Forgery leading to stored Cross-Site Scripting. The CVE entry is complemented by Wordfence vulnerability data noting Ad...

CVE-2025-32477 WordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jordi Salord WP-Easy Menu allows Stored XSS. This issue affects WP-Easy Menu: from n/a through 0.41...

CVE-2025-32477

CVE-2025-32477 - WP-Easy Menu is a CSRF-driven vulnerability that can lead to Stored XSS in WP-Easy Menu versions up to 0.41. The CVSS 3.1 base score is 7.1 (HIGH) with attack vector Network, attack complexity Low, privileges required None, user interaction Required, and impact on confidentiality...

CVE-2025-32477 WordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jordi Salord WP-Easy Menu wp-easy-menu allows Stored XSS.This issue affects WP-Easy Menu: from n/a through = 0.41...

CVE-2025-32478 WordPress WP SexyLightBox plugin <= 0.5.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mario Aguiar WP SexyLightBox wp-sexylightbox allows Stored XSS.This issue affects WP SexyLightBox: from n/a through = 0.5.3...

CVE-2025-32478

CVE-2025-32478 : Wordfence/EU product data confirms a vulnerability in the WP SexyLightBox plugin (affected: WP SexyLightBox

CVE-2025-32479

CVE-2025-32479 is confirmed in connected material as a CSRF-to-Stored XSS vulnerability in the Flags Widget for WordPress (affected: Flags Widget ≤ 1.0.7). The CVSS 3.1 base score is 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L); exploitation details are not provided in the documents. Patch status fo...

CVE-2025-32480 WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...

CVE-2025-32482 WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in quanganhdo Custom Smilies custom-smilies allows Stored XSS.This issue affects Custom Smilies: from n/a through = 1.2...

CVE-2025-32481 WordPress Nino Social Connect plugin <= 2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ninotheme Nino Social Connect allows Stored XSS. This issue affects Nino Social Connect: from n/a through 2.0...

CVE-2025-32481

CVE-2025-32481 is a CSRF to Stored XSS vulnerability in the WordPress plugin Nino Social Connect (ninotheme). Affected range is from unspecified earlier versions up to and including 2.0. The initial data indicates the vulnerability is unpatched, with no public fix details provided. Exploitation s...

CVE-2025-32484 WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mathieu Chartier WP-Planification allows Stored XSS. This issue affects WP-Planification: from n/a through 2.3.1...

CVE-2025-32485

CVE-2025-32485: Cross-Site Request Forgery in WP Performance Pack affecting versions up to 2.5.4; CVSSv3.1 base score 4.3 (Medium). Connected sources indicate the vulnerability exists and is currently Unpatched; no exploit details provided in the documents. Affected product: WordPress WP Performa...