9 matches found
EUVD-2025-3233
Malicious code in bioql PyPI...
CVE-2025-23532
Cross-Site Request Forgery CSRF vulnerability in Regios MyAnime Widget myanime-widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through = 1.0...
CVE-2025-23532
Cross-Site Request Forgery CSRF vulnerability in Regios MyAnime Widget myanime-widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through = 1.0...
CVE-2025-23532 WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability
Cross-Site Request Forgery CSRF vulnerability in Regios MyAnime Widget myanime-widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through = 1.0...
CVE-2025-23532 WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability
Cross-Site Request Forgery CSRF vulnerability in Regios MyAnime Widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through 1.0...
CVE-2025-23532
CVE-2025-23532 : In WordPress plugin MyAnime Widget, a Cross-Site Request Forgery can lead to Privilege Escalation. Affected: MyAnime Widget (from n/a through 1.0). CVSS 3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Patch status in vendor/Wordfence context is Unpatched as of the lates...
WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability
CSRF to Privilege Escalation vulnerability discovered by Mika in WordPress Plugin MyAnime Widget versions = 1.0...
WordPress plugin MyAnime Widget 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reques...
PT-2025-4926 · Unknown · Myanime Widget
Name of the Vulnerable Software and Affected Versions: MyAnime Widget versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This means an attacker can perform actions on behalf of another user without their knowledge or consent. Recommendations...