CVE-2025-30856 WordPress Custom Field For WP Job Manager plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Cross Site Request Forgery.This issue affects Custom Field For WP Job Manager: from n/a through = 1.4...

CVE-2025-30856

CVE-2025-30856 is a CSRF vulnerability in the WordPress plugin Custom Field For WP Job Manager , affecting versions from unknown until 1.4. The WordFence listing confirms the issue as Cross-Site Forgery and indicates a patch (patched) was released. CVSSv3.1 base score is 4.3 (Medium): AV:N/AC:L/P...

CVE-2025-30822 WordPress Custom Login Logo Plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hakik Zaman Custom Login Logo ideal-wp-login-logo-changer allows Cross Site Request Forgery.This issue affects Custom Login Logo: from n/a through = 1.1.7...

CVE-2025-30822 WordPress Custom Login Logo Plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hakik Zaman Custom Login Logo ideal-wp-login-logo-changer allows Cross Site Request Forgery.This issue affects Custom Login Logo: from n/a through = 1.1.7...

CVE-2025-30822

CVE-2025-30822 describes a Cross-Site Forgery in the WordPress plugin Custom Login Logo, affecting versions up to 1.1.7. The CVSS v3.1 base score is 4.3 (Medium) with UI: Required, no privileges, network attack vector. The Connected Documents do not provide explicit exploitation details or a conf...

WordPress plugin Hakik Zaman Custom Login Logo has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-30856: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Cross Site Request Forgery.This issue affects Custom Field For WP Job Manager: from n/a through = 1.4...

CVE-2025-30822: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hakik Zaman Custom Login Logo ideal-wp-login-logo-changer allows Cross Site Request Forgery.This issue affects Custom Login Logo: from n/a through = 1.1.7...

CVE-2025-30888: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Cross Site Request Forgery.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through = 1.1...

PT-2025-13118

Name of the Vulnerable Software and Affected Versions Custom Field For WP Job Manager versions 1.4 and earlier Description A Cross-Site Request Forgery CSRF issue affects the Custom Field For WP Job Manager, allowing unauthorized requests. This is a type of attack where an attacker tricks a user...

PT-2025-13140

Name of the Vulnerable Software and Affected Versions Custom Fields Account Registration For Woocommerce versions 1.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into...

WordPress Plugin: Custom Fields – Account Registration for Woocommerce: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Custom Fields...

WordPress Plugin: Custom Field for WP Job Manager – Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

PT-2025-13097

Name of the Vulnerable Software and Affected Versions Hakik Zaman Custom Login Logo versions 1.1.7 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations For versions 1.1.7...

CVE-2025-28917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazyloong Custom Smilies custom-smilies-se allows Stored XSS.This issue affects Custom Smilies: from n/a through = 2.9.2...

CVE-2025-28889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in starblank Custom Product Stickers for Woocommerce custom-product-stickers-for-woocommerce allows Reflected XSS.This issue affects Custom Product Stickers for Woocommerce: from n/a through = 1.9.0...

CVE-2025-23952

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ntm custom-field-list-widget custom-field-list-widget allows PHP Local File Inclusion.This issue affects custom-field-list-widget: from n/a through = 1.5.1...

CVE-2025-30564

Cross-Site Request Forgery CSRF vulnerability in wpwox Custom Script Integration custom-script-integration allows Stored XSS.This issue affects Custom Script Integration: from n/a through = 2.1...

CVE-2025-28917 WordPress Custom Smilies plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazyloong Custom Smilies custom-smilies-se allows Stored XSS.This issue affects Custom Smilies: from n/a through = 2.9.2...

CVE-2025-28917

CVE-2025-28917 : WordPress/Plugin Custom Smilies vulnerability with cross-site scripting (Stored XSS) due to improper neutralization of input during web page generation. Affected: Custom Smilies versions up to 2.9.2 (WordPress plugin). Connected documents confirm this CVE ID corresponds to the XS...