23194 matches found
CVE-2025-48318 WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross-Site Request Forgery CSRF vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through = 1.2...
CVE-2025-48318
CVE-2025-48318 affects the WordPress plugin 多说社会化评论框 (versions
CVE-2025-48311
The CVE-2025-48311 entry concerns a CSRF vulnerability in OffClicks Invisible Optin (WordPress plugin) that also allows Stored XSS. Public details indicate the affected range is Invisible Optin versions n/a through 1.0. The issue combines CSRF with stored XSS, enabling an attacker to induce XSS t...
CVE-2025-48311 WordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through = 1.0...
CVE-2025-48311 WordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through = 1.0...
CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor allows Cross Site Request Forgery. This issue affects Table Editor: from n/a through 1.6.4...
CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...
CVE-2025-48310
The CVE-2025-48310 CSRF flaw affects the WordPress plugin Table Editor (wp-table-editor) up to version 1.6.4. Public sources include Patchstack/Wordfence entries and CVE records; the vulnerability allows CSRF actions by authenticated users. The Patchstack/Wordfence entries indicate the issue is s...
CVE-2025-48309 WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through = 1.0.1 Lite...
CVE-2025-48309 WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in web-able BetPress allows Stored XSS. This issue affects BetPress: from n/a through 1.0.1 Lite...
CVE-2025-48308 WordPress Newsletter subscription optin module plugin <= 1.2.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allows Stored XSS.This issue affects Newsletter subscription optin module: from n/a through = 1.2.9...
CVE-2025-48308
CVE-2025-48308 discusses a CSRF vulnerability in the Newsletter subscription optin module (versions up to 1.2.9) that can lead to Stored XSS. Affected software: Newsletter subscription optin module. Root cause: CSRF enabling stored XSS. Impact per sources: potential for stored XSS with low to mod...
CVE-2025-48307 WordPress SEO For Images plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from n/a through = 1.0.0...
CVE-2025-48307 WordPress SEO For Images plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from n/a through = 1.0.0...
CVE-2025-48307
CVE-2025-48307 : WordPress plugin SEO For Images has a CSRF vulnerability that can lead to stored XSS. Affected versions are n/a through 1.0.0. Evidence from Patchstack and PT-Security confirms CSRF to Stored XSS is present, with remediation guidance recommending updating to a version later than ...
CVE-2025-48306 WordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in developers savyour Savyour Affiliate Partner savyour-affiliate-partner allows Stored XSS.This issue affects Savyour Affiliate Partner: from n/a through = 2.1.4...
CVE-2025-48306
CVE-2025-48306 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Savyour Affiliate Partner (versions up to 2.1.4). The CVSS 3.1 base score is 7.1 (High); attack vector is NETWORK with LOW attack complexity, NONE privileges, user interaction required, and within a changed scope,...
CVE-2025-48304 WordPress Google XML News Sitemap plugin plugin <= 0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitemap plugin: from n/a through = 0.02...
CVE-2025-48304 WordPress Google XML News Sitemap plugin plugin <= 0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitemap plugin: from n/a through = 0.02...