WordPress Custom Comment Notifications plugin <= 1.0.8 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Custom Comment Notifications versions = 1.0.8...

WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Simple User Profile versions = 1.9...

CVE-2025-22690

Cross-Site Request Forgery CSRF vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through = 1.4.6...

WordPress Awesome Event Booking plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Awesome Event Booking versions = 2.7.5...

WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability

CSRF to Settings Change vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions = 1.7.2...

CVE-2025-22703 WordPress Forge – Front-End Page Builder plugin <= 1.4.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in manuelvicedo Forge – Front-End Page Builder forge allows Stored XSS.This issue affects Forge – Front-End Page Builder: from n/a through = 1.4.6...

CVE-2025-22690

CVE-2025-22690 concerns DigiTimber cPanel Integration (WordPress plugin) vulnerable to Cross-Site Request Forgery (CSRF) that enables Stored XSS. Affected versions are 1.4.6 and earlier. The publicly disclosed metrics cite CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack com...

CVE-2025-22688

CVE-2025-22688 affects WordPress plugin Unlimited Page Sidebars (versions

CVE-2025-22690 WordPress DigiTimber cPanel Integration plugin <= 1.4.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through = 1.4.6...

CVE-2025-22685 WordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2025-22685 WordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2025-22685

CVE-2025-22685 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin Tags to Keywords (also listed as Tags to Keywords/Tags to Meta Keywords) affecting versions up to and including 1.0.1. The vulnerability can allow a CSRF attacker to inject or persist XSS payloads in stored form. Public ...

PT-2025-4637 · WordPress · Wordpress Signature

Name of the Vulnerable Software and Affected Versions: WordPress Signature versions 0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web...

WordPress WP Find Your Nearest Plugin <= 0.3.1 - CSRF to Settings Change vulnerability

CSRF to Settings Change vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Find Your Nearest versions = 0.3.1...

CVE-2024-13096 WP Finance <= 1.3.6 - Stored XSS via CSRF

The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-13096 WP Finance <= 1.3.6 - Stored XSS via CSRF

The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2025-1995 · WordPress · Wp Finance

Name of the Vulnerable Software and Affected Versions: WP Finance WordPress plugin versions 1.3.6 and earlier Description: The issue concerns the lack of CSRF checks in certain areas of the plugin, along with missing sanitization and escaping. This could allow attackers to make logged-in admins a...

CVE-2025-23985

Cross-Site Request Forgery CSRF vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Cross Site Request Forgery.This issue affects Dynamic URL SEO: from n/a through = 1.0...

CVE-2025-24749 WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On SSO allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On SSO: from n/a through 1.2.5...

CVE-2025-24749 WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On SSO allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On SSO: from n/a through 1.2.5...