4752 matches found
CVE-2025-7688
The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'add-user-meta' page. This makes it possible for unauthenticated attackers to update settings and inject...
CVE-2025-7688
The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'add-user-meta' page. This makes it possible for unauthenticated attackers to update settings and inject...
CVE-2025-7688 Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'add-user-meta' page. This makes it possible for unauthenticated attackers to update settings and inject...
CVE-2025-7688
CVE-2025-7688 affects the WordPress Add User Meta plugin (versions ≤ 1.0.1). The vulnerability is a Cross-Site Forgery risk caused by missing or incorrect nonce validation on the add-user-meta page, enabling unauthenticated attackers to forge requests that update settings and inject stored script...
CVE-2025-7688 Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'add-user-meta' page. This makes it possible for unauthenticated attackers to update settings and inject...
PT-2025-33462 · WordPress · Add User Meta
Name of the Vulnerable Software and Affected Versions: Add User Meta plugin for WordPress versions up to and including 1.0.1 Description: The Add User Meta plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the add-user-meta page. Thi...
WordPress plugin Add User Meta 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Add User Meta plugin, which stems from missing or incorrect validation of random numbers on the "add-user-meta...
SUSE CVE-2025-8715
Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...
Malicious code in meta-error-secure-encode-refactor (npm)
The package meta-error-secure-encode-refactor was found to contain malicious code...
Malicious code in easy-visualize-decode-phi-meta (npm)
The package easy-visualize-decode-phi-meta was found to contain malicious code...
Malicious code in meta-link-load-earth-parse (npm)
The package meta-link-load-earth-parse was found to contain malicious code...
Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
Malicious code in meta-notify-rain-cat-fast (npm)
The package meta-notify-rain-cat-fast was found to contain malicious code...
Malicious code in xi-psi-fire-meta-rain (npm)
The package xi-psi-fire-meta-rain was found to contain malicious code...
MAL-2025-19083 Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
MAL-2025-17924 Malicious code in daemon-cold-wind-meta-kappa (npm)
The package daemon-cold-wind-meta-kappa was found to contain malicious code...
MAL-2025-26214 Malicious code in meta-analyze-cold-code-old (npm)
The package meta-analyze-cold-code-old was found to contain malicious code...
MAL-2025-20079 Malicious code in express-meta (npm)
The package express-meta was found to contain malicious code...