WordPress plugin W3SCloud Contact Form 7 to Zoho CRM 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-39769

CVE-2025-60028 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-60028 Published : Sept. 26, 2025, 3:15 a.m. | 4 hours, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

WordPress plugin Vehica Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-39614

Name of the Vulnerable Software and Affected Versions GST for WooCommerce versions through 2.0 Description A Cross-Site Request Forgery CSRF issue exists in Ashwani kumar GST for WooCommerce, which also allows Stored Cross-Site Scripting XSS. The issue allows for potential malicious actions to be...

PT-2025-39560

Name of the Vulnerable Software and Affected Versions grooni Groovy Menu versions through 1.4.3 Description A Cross-Site Request Forgery CSRF issue exists in grooni Groovy Menu. This allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations Upda...

WordPress plugin Groovy Menu 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb version 1.0.7.2 and earlier, which stems from an unknown code mishandling that could lead to a cross-site request forgery attack...

PT-2025-39588

Name of the Vulnerable Software and Affected Versions yonifre Lenix scss compiler versions n/a through 1.2 Description A Cross-Site Request Forgery CSRF issue exists in the yonifre Lenix scss compiler. This allows attackers to perform actions on behalf of authenticated users. Recommendations At t...

WordPress plugin Conditional Cart Messages for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site request...

WordPress plugin Lenix scss compiler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

PT-2025-39486

Name of the Vulnerable Software and Affected Versions System Dashboard plugin for WordPress versions prior to 2.8.21 Description The System Dashboard plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by a lack of nonce validation in the sd toggle logs function...

PT-2025-39659

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions through 1.0.7.2 Description A weakness exists in givanz Vvveb that could allow for cross-site request forgery. The vulnerability affects unknown code and can be exploited remotely. The exploit has been publicly released...

WordPress plugin HTACCESS IP Blocker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site reque...

PT-2025-39611

Name of the Vulnerable Software and Affected Versions Taraprasad Swain HTACCESS IP Blocker versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in Taraprasad Swain HTACCESS IP Blocker, which also allows Stored Cross-Site Scripting XSS. The issue allows for potential...

PT-2025-39540

Name of the Vulnerable Software and Affected Versions Shahjada Download Manager versions through 3.3.24 Description A Cross-Site Request Forgery CSRF issue exists in Shahjada Download Manager. This allows attackers to perform actions on behalf of an authenticated user without their knowledge...

WordPress plugin Javo Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Di Themes Demo Site Importer 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site request forgery...

WordPress plugin GST for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

WordPress plugin System Dashboard 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...