PT-2025-36185

Name of the Vulnerable Software and Affected Versions: Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule versions n/a through 2020.1.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Dejan Markovic WordPress Buffer ...

WordPress plugin WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin WordPress Buffer - HYPESocial...

WordPress plugin Invelity MyGLS connect 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-36139

Name of the Vulnerable Software and Affected Versions: themelocation Custom WooCommerce Checkout Fields Editor versions through 1.3.4 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users...

PT-2025-36141

Name of the Vulnerable Software and Affected Versions: KCS Responder versions through 4.3.8 Description: KCS Responder is susceptible to a Cross-Site Request Forgery CSRF issue, which allows attackers to perform actions on behalf of authenticated users. Recommendations: Versions prior to 4.3.9 ar...

WordPress plugin Add to Feedly 跨站请求伪造漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin Add to Feedly, no detailed...

WordPress plugin To Lead For Salesforce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Responder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2025-36143

Name of the Vulnerable Software and Affected Versions: brijrajs WooCommerce Single Page Checkout versions through 1.2.7 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: Upda...

WordPress plugin WN Flipbox Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-36244

Name of the Vulnerable Software and Affected Versions: Floating Window Music Player versions through 3.4.2 Description: A Cross-Site Request Forgery CSRF vulnerability exists in ericzane Floating Window Music Player, which also allows Stored Cross-Site Scripting XSS. Recommendations: Update...

WordPress plugin MSTW League Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-36208

Name of the Vulnerable Software and Affected Versions: Simasicher SimaCookie versions through 1.3.2 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Simasicher SimaCookie, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is no...

Linux Distros Unpatched Vulnerability : CVE-2022-45149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was...

Linux Distros Unpatched Vulnerability : CVE-2024-34001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk. CVE-2024-34001 Note that Nessus relies on the presence of the packa...

PT-2025-36204

Name of the Vulnerable Software and Affected Versions: reimund Compact Admin versions n/a through 1.3.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in reimund Compact Admin, allowing attackers to perform actions on behalf of an unsuspecting user. This issue allows Cross Si...

WordPress plugin Quick Event Calendar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Hide Real Download Path 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-36187

Name of the Vulnerable Software and Affected Versions: aakash1911 WP likes versions n/a through 3.1.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in aakash1911 WP likes, which also allows Reflected Cross-Site Scripting XSS. Recommendations: Update aakash1911 WP likes to a...

PT-2025-36183

Name of the Vulnerable Software and Affected Versions: Subhash Kumar Database to Excel versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Subhash Kumar Database to Excel, which also allows for Stored Cross-Site Scripting XSS. Recommendations: At the...