CVE-2023-4209

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

EUVD-2023-36359

Malicious code in bioql PyPI...

EUVD-2023-54083

Malicious code in bioql PyPI...

CVE-2025-49237 WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through = 0.9.10...

CVE-2025-49237 WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through = 0.9.10...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

PT-2023-23601 · Unknown · Poeditor Plugin

Name of the Vulnerable Software and Affected Versions: POEditor plugin versions 0.9.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-4209

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

PT-2023-28262 · WordPress · Poeditor

Name of the Vulnerable Software and Affected Versions: POEditor WordPress plugin versions prior to 0.9.8 Description: The issue is related to the lack of CSRF checks in various places within the plugin, allowing attackers to perform unwanted actions on logged-in admins, such as resetting the...