WordPress Findgo Theme <= 1.3.55 is vulnerable to Cross Site Request Forgery (CSRF)

Software Findgo Type Theme Vulnerable versions = 1.3.55 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-58250 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 3d6b8977539c Credits Tran Nguyen Bao Khanh VCI - VN...

WordPress plugin Findgo 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38810

Name of the Vulnerable Software and Affected Versions TravelMap versions through 1.0.3 Description A Cross-Site Request Forgery CSRF issue exists in TravelMap Travel Map. This allows attackers to potentially perform actions on behalf of unsuspecting users. Recommendations Update TravelMap to a...

PT-2025-38885

Name of the Vulnerable Software and Affected Versions LIJE Show Pages List versions through 1.2.0 Description A Cross-Site Request Forgery CSRF issue exists in LIJE Show Pages List. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The issue...

PT-2025-38963

Name of the Vulnerable Software and Affected Versions Interact: Embed A Quiz On Your Site versions through 3.1 Description A Cross-Site Request Forgery CSRF issue exists in Interact: Embed A Quiz On Your Site. This allows attackers to perform actions on behalf of an unsuspecting user...

WordPress plugin LWS Affiliation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

WordPress plugin Interact Embed A Quiz On Your Site 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers...

WordPress plugin Stock Message 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-38781

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description A Cross-Site Request Forgery CSRF issue exists in Double the Donation. This allows attackers to potentially perform actions on behalf of an authenticated user without their knowledge...

PT-2025-38946

Name of the Vulnerable Software and Affected Versions EdwardBock Grid versions through 2.3.1 Description A Cross-Site Request Forgery CSRF issue exists in EdwardBock Grid, which also allows Stored Cross-Site Scripting XSS. This allows malicious actors to potentially perform actions on behalf of a...

WordPress Constructo Theme <= 4.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Constructo Type Theme Vulnerable versions = 4.3.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-58244 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 60cf627805f3 Credits Tran Nguyen Bao Khanh VCI -...

WordPress plugin SALESmanago 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

WordPress plugin RIS Version Switcher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin SV Proven Expert 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

PT-2025-38992

Name of the Vulnerable Software and Affected Versions activewebsight SEO Backlink Monitor versions through 1.6.0 Description A Cross-Site Request Forgery CSRF issue exists in activewebsight SEO Backlink Monitor. This allows attackers to perform actions on behalf of authenticated users...

PT-2025-38965

Name of the Vulnerable Software and Affected Versions ShrinkTheWeb STW Website Previews versions through 2.8.5 Description A Cross-Site Request Forgery CSRF issue exists in ShrinkTheWeb STW Website Previews, which also allows Stored Cross-Site Scripting XSS. This allows an attacker to perform...

PT-2025-38833

Name of the Vulnerable Software and Affected Versions Damian BP Disable Activation Reloaded versions through 1.2.1 Description A Cross-Site Request Forgery issue exists in Damian BP Disable Activation Reloaded. The issue involves accessing functionality that is not properly constrained by Access...

WordPress plugin WorkScout-Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-39012

Name of the Vulnerable Software and Affected Versions RIS Version Switcher versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in RIS Version Switcher – Downgrade or Upgrade WP Versions Easily. This allows attackers to perform actions on behalf of an authenticated user...

WordPress plugin WPMK PDF Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin...