Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/10/04 11:53 a.m.6 views

CVE-2025-9892

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

5.3CVSS5.2AI score0.00017EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/03 10:39 p.m.5 views

WordPress Restrict User Registration plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Restrict User Registration versions = 1.0.1...

5.3CVSS7AI score0.00017EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/10/03 12:15 p.m.3 views

CVE-2025-9892

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

5.3CVSS0.00017EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 11:17 a.m.3 views

EUVD-2025-32263

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

5.3CVSS4.8AI score0.00017EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/03 11:17 a.m.2 views

CVE-2025-9892 Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

5.3CVSS4.9AI score0.00017EPSS
Exploits0References2
CVE
CVE
added 2025/10/03 11:17 a.m.8 views

CVE-2025-9892

CVE-2025-9892 describes a Cross-Site Forgery vulnerability in the WordPress plugin Restrict User Registration (versions ≤ 1.0.1) due to missing nonce validation in the update() function. This allows unauthenticated attackers to update plugin settings by mislead­ing an admin into performing an act...

5.3CVSS4.9AI score0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/03 11:17 a.m.6 views

CVE-2025-9892 Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update function. This makes it possible for unauthenticated attackers to update the plugin's...

5.3CVSS0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/03 12:0 a.m.2 views

WordPress plugin Restrict User Registration 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

5.3CVSS6.5AI score0.00017EPSS
Exploits0References2
NVD
NVD
added 2025/04/17 4:15 p.m.2 views

CVE-2025-32655

Cross-Site Request Forgery CSRF vulnerability in DevriX Restrict User Registration restrict-user-registration allows Stored XSS.This issue affects Restrict User Registration: from n/a through = 1.0.1...

7.1CVSS0.00223EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin Restrict User Registration 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.2AI score0.00223EPSS
Exploits0References1
Rows per page
Query Builder