CVE-2025-54052 WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Realtyna Realtyna Organic IDX plugin allows PHP Local File Inclusion. This issue affects Realtyna Organic IDX plugin: from n/a through 5.0.0...

WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

PT-2025-33940 · Basix · Basix Nex-Forms

Name of the Vulnerable Software and Affected Versions: Basix NEX-Forms versions through 9.1.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Basix NEX-Forms, allowing attackers to perform actions on behalf of an authenticated user without their knowledge. This vulnerabilit...

PT-2025-34051

Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 QuickCMS affected versions not specified Description: QuickCMS is vulnerable to Cross-Site Request Forgery in the article creation functionality. A malicious attacker can craft a special website that, when visited by an...

WordPress plugin Sign-up Sheets 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-33933 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: DexignZone JobZilla - Job Board WordPress Theme versions n/a through 2.0 Description: A Cross-Site Request Forgery CSRF issue exists in DexignZone JobZilla - Job Board WordPress Theme, potentially leading to privilege escalation...

PT-2025-33935 · Fetch Designs · Fetch Designs Sign-Up Sheets

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets versions through 2.3.3 Description: The vulnerability allows for Cross-Site Request Forgery CSRF. This issue affects the Sign-up Sheets functionality. Recommendations: At the moment, there is no information about ...

WordPress Plugin Build App Online Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Build App Online 1.0.23 and prior...

PT-2025-33952 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions not specified through 1.3 Description: A Cross-Site Request Forgery CSRF issue exists in Dourou Cookie Warning, allowing attackers to perform Cross-Site Request Forgery attacks. Recommendations: At the moment,...

PT-2025-34015 · WordPress · Realtyna Organic Idx Plugin

Name of the Vulnerable Software and Affected Versions: Realtyna Organic IDX plugin versions through 5.0.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in the Realtyna Organic IDX plugin, allowing for PHP Local File Inclusion. Recommendations: Update Realtyna Organic IDX...

CVE-2025-50902

Cross Site Request Forgery CSRF vulnerability in old-peanut Open-Shop aka old-peanut/wechatappletopensource thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message...

PT-2025-34064

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.0.0 through 7.4.3.119 Liferay DXP versions 2023.Q3.1 through 2023.Q4.9 Liferay DXP versions 2024.Q1.1 through 2024.Q1.6 Description: The application lacks sufficient Cross-Site Request Forgery CSRF protection for...

WordPress plugin Chartify cross-site request forgery vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Chartify 3.5.3 and earlier version...

Open-Shop 安全漏洞

Open-Shop is a small program mall by a Chinese old-peanut individual developer. A security vulnerability exists in Open-Shop 1.0.0 and earlier versions, which stems from vulnerability to cross-site request forgery attacks that could lead to access to sensitive information...

WordPress plugin NEX-Forms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Cookie Warning 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Inspiro Theme <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Inspiro Type Theme Vulnerable versions = 2.1.2 Fixed in 2.1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-8592 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID 4528bac00297 Credits Dmitrii Ignatyev Required...

WordPress plugin WP Discord Post Plus – Supports Unlimited Channels 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin WP...

PT-2025-34039 · WordPress · Sendwp +1

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads versions prior to 3.5.1 Description: The Easy Digital Downloads plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validations in the edd sendwp disconnect and edd sendwp remote insta...

CVE-2025-50902

A Cross Site Request Forgery (CSRF) vulnerability exists in old-peanut Open-Shop (also known as old-peanut/wechat_applet__open_source ) versions through 1.0.0 . This flaw allows an attacker to obtain sensitive information by sending a crafted HTTP Post message . Currently, there is no information...