CVE-2025-23660

Cross-Site Request Forgery CSRF vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through = 1.3...

EUVD-2025-3324

Malicious code in bioql PyPI...

CVE-2025-23660

Cross-Site Request Forgery CSRF vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through = 1.3...

CVE-2025-23660

Cross-Site Request Forgery CSRF vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through = 1.3...

CVE-2025-23660 WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3...

CVE-2025-23660

CVE-2025-23660 describes a Cross-Site Request Forgery (CSRF) vulnerability in MFPlugin that enables Stored XSS. The entry states the issue affects MFPlugin versions from n/a through 1.3 and does not specify affected WordPress contexts, payloads, or exploit details. Red Hat’s related record corrob...

WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

CSRF to Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin MFPlugin versions = 1.3...

PT-2025-5003 · Mfplugin · Mfplugin

Name of the Vulnerable Software and Affected Versions: MFPlugin versions n/a through 1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also stor...

WordPress plugin MFPlugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reque...