CVE-2025-23720 WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Castelluccio Web Push web-push allows Stored XSS.This issue affects Web Push: from n/a through = 1.4.0...

CVE-2025-23720 WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Castelluccio Web Push web-push allows Stored XSS.This issue affects Web Push: from n/a through = 1.4.0...

CVE-2025-23720

CVE-2025-23720 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Web Push (web-push) plugin by Marco Castelluccio that can lead to stored XSS. The provided sources confirm the issue arises in Web Push and can result in stored XSS, affecting versions up to and including ...

CVE-2025-23702 WordPress Anonymize Links plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Schalk Burger Anonymize Links anonymize-links allows Stored XSS.This issue affects Anonymize Links: from n/a through = 1.1...

CVE-2025-23702 WordPress Anonymize Links plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Schalk Burger Anonymize Links allows Stored XSS.This issue affects Anonymize Links: from n/a through 1.1...

CVE-2025-23715 WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in RaymondDesign Post & Page Notes post-page-notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through = 0.1.1...

CVE-2025-23710 WordPress Flying Twitter Birds plugin <= 1.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mayur Sojitra Flying Twitter Birds flying-twitter-birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through = 1.8...

CVE-2025-23710 WordPress Flying Twitter Birds plugin <= 1.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mayur Sojitra Flying Twitter Birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through 1.8...

CVE-2025-23703

CVE-2025-23703 describes a Cross-Site Request Forgery to Stored Cross-Site Scripting in the Free MailClient FMC WordPress plugin. Affected software: Free MailClient FMC (plugin for ABS-Hosting.nl/Walchum.net) up to version 1.0. Root cause as described in connected sources is CSRF enabling stored ...

CVE-2025-23703 WordPress Free MailClient FMC plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in cstoltenkamp Free MailClient FMC mailclient allows Stored XSS.This issue affects Free MailClient FMC: from n/a through = 1.0...

CVE-2025-23708

CVE-2025-23708 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin/solution DF Draggable (Dominic Fallows). The Red Hat advisory notes the issue affects DF Draggable up to version 1.13.2, implying all releases

CVE-2025-23694 WordPress Shabbos and Yom Tov plugin <= 1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in shabboscommerce Shabbos and Yom Tov shabbos-and-yom-tov allows Stored XSS.This issue affects Shabbos and Yom Tov: from n/a through = 1.9...

CVE-2025-23694 WordPress Shabbos and Yom Tov plugin <= 1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shabbos Commerce Shabbos and Yom Tov allows Stored XSS.This issue affects Shabbos and Yom Tov: from n/a through 1.9...

CVE-2025-23675 WordPress Import Users to MailChimp plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sana Ullah Import Users to MailChimp import-users-to-mailchimp allows Stored XSS.This issue affects Import Users to MailChimp: from n/a through = 1.0...

CVE-2025-23689 WordPress Blogger Image Import plugin <= 2.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a...

CVE-2025-23689 WordPress Blogger Image Import plugin <= 2.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a...

CVE-2025-23673

CVE-2025-23673: CSRF in Email on Publish (WordPress plugin) can trigger Stored XSS in versions from n/a through 1.5. Root cause is CSRF enabling XSS payload execution; CVSS 3.1 base 7.1. No additional remediation details provided in the documents.

CVE-2025-23673 WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through = 1.5...

CVE-2025-23673 WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Don Kukral Email on Publish allows Stored XSS.This issue affects Email on Publish: from n/a through 1.5...

CVE-2025-23693

CVE-2025-23693 describes a CSRF vulnerability in the Secure CAPTCHA plugin that can lead to a Stored XSS. Affected product: Secure CAPTCHA (plugin) with vulnerable behavior reported as allowing CSRF-to-XSS. Version scope cited as from unspecified/n-a through 1.2. Root cause: CSRF in the CAPTCHA w...