WordPress plugin Thim Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2026-1306

Name of the Vulnerable Software and Affected Versions ThimPress Thim Core versions through 2.3.3 Description A Cross-Site Request Forgery CSRF issue exists in ThimPress Thim Core. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge...

编号撤回

PHPGurukul Employee Leave Management System is an employee leave management system from PHPGurukul Inc. A security vulnerability exists in version 2.1 of the PHPGurukul Employee Leave Management System, which stems from a cross-site request forgery in the manage-employee.php component that could...

PT-2026-1282

Name of the Vulnerable Software and Affected Versions Automattic WP Job Manager versions through 2.0.0 Description The software contains a Cross-Site Request Forgery CSRF issue. CSRF allows an attacker to perform actions on behalf of an authenticated user without their knowledge. Recommendations...

EUVD-2026-0808

Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...

CVE-2025-67315

...

WordPress Add Polylang support for Customizer plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Add Polylang support for Customizer versions = 1.4.5...

CVE-2026-21430

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery CSRF. This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This, when combined with stored cross-site...

PT-2026-1232

CVE-2026-21650 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2026-21650 Published : Jan. 3, 2026, 4:15 a.m. | 3 hours, 20 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2026-1229

CVE-2026-21647 - Apple iPhone Cross-Site Request Forgery CVE ID : CVE-2026-21647 Published : Jan. 3, 2026, 4:15 a.m. | 3 hours, 20 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-1234

CVE-2026-21652 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2026-21652 Published : Jan. 3, 2026, 4:15 a.m. | 3 hours, 20 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

EUVD-2026-0757

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery CSRF. This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This, when combined with stored cross-site...

CVE-2026-21430 Emlog: CSRF chained with stored XSS leads to ATO

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery CSRF. This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This, when combined with stored cross-site...

CVE-2025-15405

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely...

CVE-2025-12685

CVE-2025-12685 affects the WPBookit WordPress plugin up to version 1.0.7 and arises from a missing CSRF check when deleting customers, potentially enabling an unauthenticated attacker to delete any customer via CSRF. Public sources consistently describe WPBookit

EUVD-2026-0713

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack...

CVE-2025-12685 WPBookit <= 1.0.7 - Customer Deletion via CSRF

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack...

PT-2026-1177

CVE-2025-34167 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-34167 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the lin...

PT-2026-1117

Name of the Vulnerable Software and Affected Versions Emlog version 2.5.23 Description Emlog version 2.5.23’s article creation functionality is susceptible to cross-site request forgery CSRF. This allows an attacker to force a user to post an article containing arbitrary content. When combined wi...

emlog 跨站请求伪造漏洞

emlog is emlog open source PHP and MySQL based CMS site building system. A cross-site request forgery vulnerability exists in emlog version 2.5.23. The vulnerability stems from a cross-site request forgery in the article creation function, which could lead to users being forced to publish...