CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

CVE-2025-26925

CVE-2025-26925 is a CSRF vulnerability in the WordPress plugin Admin Menu Manager, affecting versions up to and including 1.0.3. The provided documents confirm the issue as a CSRF in Admin Menu Manager, but do not supply concrete exploitation details, affected product/version matrix beyond the 1....

WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Admin Menu Manager versions = 1.0.3...

CVE-2025-26925: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

WordPress Plugin Admin Menu Manager has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-8693 · Unknown · Admin Menu Manager

Name of the Vulnerable Software and Affected Versions: Admin Menu Manager versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2025-26881: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Sticky Content sticky-menu-block allows Stored XSS.This issue affects Sticky Content: from n/a through = 1.0.1...

CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

CVE-2025-1617: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

WordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin All In Menu versions = 1.1.5...

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

CVE-2024-13792

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

CVE-2025-25960

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

CVE-2025-25960: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

CVE-2024-13792: Improper Control of Generation of Code

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

CVE-2025-25960

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

PT-2025-7310

Name of the Vulnerable Software and Affected Versions PHPJabbers Cinema Booking System version 1.0 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability in the Now Showing menu, specifically affecting the date parameter. This allows for potential malicious script...

PT-2025-7295

Name of the Vulnerable Software and Affected Versions PHPJabbers Restaurant Booking System version 3.0 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability in the Reservations menu, specifically in the Schedule section's date parameter. This allows for potential...