CVE-2025-52727 WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs CSS3 Vertical Web Pricing Tables css3verticalwebpricingtables allows Reflected XSS.This issue affects CSS3 Vertical Web Pricing Tables: from n/a through = 1.9...

CVE-2025-47556

Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3webpricingtablesgrids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Compare Pricing Tables for WordPress: from n/a through = 11.6...

CVE-2025-31923

Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-31922

Cross-Site Request Forgery CSRF vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-32180

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojofywp Product Carousel For WooCommerce – WoorouSell woorousell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through = 1.1.0...

CVE-2025-31922

Cross-Site Request Forgery CSRF vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-31922 WordPress CSS3 Accordions for WordPress plugin <= 3.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-31922

CVE-2025-31922 concerns the WordPress plugin “CSS3 Accordions for WordPress” (versions 3.0 and earlier). The entry describes a CSRF to Stored XSS vulnerability in this plugin, affecting WordPress sites using the plugin up to version 3.0. The CVE’s metrics show a CVSS 3.1 base score of 7.1 (HIGH) ...

CVE-2025-31922 WordPress CSS3 Accordions for WordPress plugin <= 3.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in QuanticaLabs CSS3 Accordions for WordPress allows Stored XSS. This issue affects CSS3 Accordions for WordPress: from n/a through 3.0...

CVE-2025-31923 WordPress CSS3 Accordions for WordPress plugin <= 3.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-31923

CVE-2025-31923 concerns the WordPress plugin CSS3 Accordions for WordPress, specifically versions 3.0 and earlier, with a Missing Authorization vulnerability that enables exploitation of improperly configured access controls (broken access control). The published data indicate an affected product...

CVE-2025-31923 WordPress CSS3 Accordions for WordPress plugin <= 3.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Accordions for WordPress: from n/a through = 3.0...

CVE-2025-32180

CVE-2025-32180 references a Missing Authorization vulnerability in the WordPress plugin CSS3 Tooltips for WordPress (affected: versions up to 1.8). The issue allows exploitation of improperly configured access control, with an attack vector over the network, and a base CVSS v3.1 score of 4.3 (Imp...

CVE-2025-32180 WordPress Product Carousel For WooCommerce – WoorouSell plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojofywp Product Carousel For WooCommerce – WoorouSell woorousell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through = 1.1.0...

CVE-2025-32180 WordPress CSS3 Tooltips for WordPress <= 1.8 - Broken Access Control Vulnerability

Missing Authorization vulnerability in QuanticaLabs CSS3 Tooltips for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CSS3 Tooltips for WordPress: from n/a through 1.8...

WordPress CSS3 Accordions for WordPress plugin <= 3.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin CSS3 Accordions for WordPress versions = 3.0...

WordPress CSS3 Tooltips for WordPress plugin <= 1.8 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin CSS3 Tooltips for WordPress versions = 1.8...

PT-2025-21681 · WordPress · Quanticalabs Css3 Accordions

Name of the Vulnerable Software and Affected Versions: QuanticaLabs CSS3 Accordions for WordPress versions 3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...

WordPress plugin CSS3 Accordions for WordPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-21680 · WordPress · Css3 Accordions

Name of the Vulnerable Software and Affected Versions: CSS3 Accordions for WordPress versions 3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...