Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/29 3:19 p.m.•26 views

CVE-2025-14616

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recootysavemaybe function. This makes it possible for unauthenticated attackers to update the...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 12:15 p.m.•35 views

CVE-2025-14616

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recootysavemaybe function. This makes it possible for unauthenticated attackers to update the...

4.3CVSS0.00152EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/01/28 11:23 a.m.•9 views

CVE-2025-14616

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recootysavemaybe function. This makes it possible for unauthenticated attackers to update the...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•0 views

CVE-2025-14616: Cross-Site Request Forgery (CSRF)

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recootysavemaybe function. This makes it possible for unauthenticated attackers to update the...

4.3CVSS5.5AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•19 views

PT-2026-5089

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recooty save maybe function. This makes it possible for unauthenticated attackers to update the recoo...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•18 views

WordPress plugin Recooty – Job Widget (Old Dashboard) Cross-site Request Forgery Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.00152EPSS
SaveExploits0References6
Rows per page
Query Builder