23418 matches found
CVE-2026-65512 WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...
CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-65488
Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65488 WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-65471
The CVE-2026-65471 entry concerns unauthenticated Cross Site Request Forgery (CSRF) in the WordPress Avada Core plugin
EUVD-2026-48083
Unauthenticated Cross Site Request Forgery CSRF in Avada Core = 5.15.6 versions...
CVE-2026-65471 WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Avada Core = 5.15.6 versions...
CVE-2026-65471 WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Avada Core = 5.15.6 versions...
CVE-2026-65464
The CVE-2026-65464 entry describes an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in the WordPress GiveWP plugin, affecting versions up to 4.16.3. The available documents identify the vulnerability as CSRF but do not provide details on the affected files/components, root cause...
EUVD-2026-48076
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65464 WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65464 WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65460
CVE-2026-65460 affects the WordPress Zarinpal Gateway plugin (≤ 5.1.0). The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in versions ≤ 5.1.0. Attack context: network access required, with user interaction necessary for exploitation; impact details are not expanded b...
EUVD-2026-48224
Unauthenticated Cross Site Request Forgery CSRF in Zarinpal Gateway = 5.1.0 versions...
CVE-2026-61981 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-61981
CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...
CVE-2026-61981 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
EUVD-2026-48213
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-57785
The CVE concerns the WordPress ApusListing theme (versions <= 1.2.63) with an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The available data specify the affected product (ApusListing), the vulnerable version range (