CVE-2025-54672 WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...

CVE-2025-54671 WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in bobbingwide oik oik allows Cross Site Request Forgery.This issue affects oik: from n/a through = 4.15.2...

CVE-2025-54671

The connected documents confirm CVE-2025-54671 affects the WordPress plugin oik (versions n/a–4.15.2) with a Cross‑Site Request Forgery (CSRF) flaw. No exploits, vectors, or vulnerable configurations are detailed beyond the CSRF condition and affected versions. Public sources indicate the issue i...

CVE-2025-54671 WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in bobbingwide oik oik allows Cross Site Request Forgery.This issue affects oik: from n/a through = 4.15.2...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

CVE-2025-49044

CVE-2025-49044 is a CSRF-to-Stored XSS vulnerability in the WordPress Simple Poll plugin prior to or up to version 1.1.1. The issue affects Simple Poll by Tosend.it and is documented with CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, us...

CVE-2025-6790

The Quiz and Survey Master QSM WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-6790 QSM < 10.2.3 - Template Creation via CSRF

The Quiz and Survey Master QSM WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-6790 QSM < 10.2.3 - Template Creation via CSRF

The Quiz and Survey Master QSM WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-6790

The Quiz and Survey Master (QSM) WordPress plugin, in versions prior to 10.2.3 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating plugin settings, which could allow an attacker to force a logged-in administrator to modify these set...

CVE-2024-53946

The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery CSRF on its web management interface. This vulnerability allows an attacker to trick an authenticated admin user into performing unauthorized actions, such as exploiting a command injection vulnerability in...

CVE-2024-53946

The KuWFi 4G LTE AC900 router version 1.0.13 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within its web management interface. An attacker can deceive an authenticated administrator into performing unauthorized actions, specifically by triggering a command injection vulnerability loc...

WordPress Findgo Theme <= 1.3.57 is vulnerable to Cross Site Request Forgery (CSRF)

Software Findgo Type Theme Vulnerable versions = 1.3.57 Fixed in 1.3.58 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53587 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 053168a85fa1 Credits 0xd4rk5id3 Required privile...

WordPress Kalium Theme <= 3.18.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kalium Type Theme Vulnerable versions = 3.18.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53347 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 959fedc4e441 Credits Ananda Dhakal Patchstack...

PT-2025-33226 · Chartify · Chartify

Name of the Vulnerable Software and Affected Versions: Chartify versions n/a through 3.5.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Chartify, potentially allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update Chartify to a...

PT-2025-33363 · Unknown · Netinsight Analytics Implementation Plugin

Name of the Vulnerable Software and Affected Versions: NetInsight Analytics Implementation Plugin versions through 1.0.3 Description: The NetInsight Analytics Implementation Plugin is susceptible to a Cross-Site Request Forgery CSRF issue. This allows an attacker to potentially perform actions on...

PT-2025-33254 · Unknown · Motov.Net Ebook Store

Name of the Vulnerable Software and Affected Versions: motov.net Ebook Store versions through 5.8013 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations:...

PT-2025-33234 · Unknown +2 · Gravity Forms +2

Name of the Vulnerable Software and Affected Versions: CRM Perks Connector for Gravity Forms and Google Sheets versions through 1.2.4 Description: The CRM Perks Connector for Gravity Forms and Google Sheets is susceptible to a Cross-Site Request Forgery CSRF issue. This allows for the potential...

PT-2025-33364 · Unknown · Flexo-Social-Gallery

Name of the Vulnerable Software and Affected Versions: flexostudio flexo-social-gallery versions through 1.0006 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...