PT-2025-49965

Name of the Vulnerable Software and Affected Versions JNews Paywall versions prior to 12.0.1 Description A Cross-Site Request Forgery CSRF issue exists in JNews Paywall. This allows attackers to perform actions on behalf of an authenticated user without their knowledge. Recommendations Update JNe...

WordPress plugin DoFollow Case by Case 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin i...

WordPress plugin Business Directory 安全漏洞

WordPress Business Directory Plugin is a plugin for creating and managing business directories such as business yellow pages, real estate listings, or classified ads on your WordPress website. WordPress Business Directory Plugin suffers from a cross-site request forgery vulnerability that stems...

CVE-2025-65573

Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...

PT-2025-50010

Cross-Site Request Forgery CSRF vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through = 1.3.47...

PT-2025-49964

Name of the Vulnerable Software and Affected Versions Rustaurius Ultimate FAQ versions through 2.4.3 Description A Cross-Site Request Forgery CSRF issue exists in Rustaurius Ultimate FAQ. This allows attackers to perform actions on behalf of authenticated users without their knowledge...

WordPress plugin SMTP Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin Add Custom Codes 跨站请求伪造漏洞

WordPress Add Custom Codes plugin is a free tool that allows users to add custom codes to WordPress websites. The WordPress Add Custom Codes plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately verifying that a request is coming from a...

WordPress plugin Just TinyMCE Custom Styles 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin Quick Contact Form 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-49847

Name of the Vulnerable Software and Affected Versions Panilux versions prior to 0.10.0 Description A Cross-Site Request Forgery CSRF issue exists in Panilux, potentially leading to Command Injection. The vendor has denied ownership of the product. Recommendations Update to version 0.10.0...

CVE-2025-65573

CVE-2025-65573 affects AllskyTeam AllSky v2024.12.06_06. The issue is a Cross Site Request Forgery (CSRF) that allows remote attackers to cause a denial of service via the function handle_interface_POST_and_status. The CVSSv3.1 vector is AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8....

PT-2025-50003

Cross-Site Request Forgery CSRF vulnerability in Michael Revellin-Clerc Media Library Downloader media-library-downloader allows Cross Site Request Forgery.This issue affects Media Library Downloader: from n/a through = 1.4.0...

Panilux 跨站请求伪造漏洞

Panilux is a project management and content distribution system from the Turkish company Panilux. A cross-site request forgery vulnerability exists in Panilux versions prior to Panilux v.0.10.0, which stems from cross-site request forgery and could lead to a command injection attack...

PT-2025-50012

Cross-Site Request Forgery CSRF vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through = 2.5.2...

PT-2025-49972

Name of the Vulnerable Software and Affected Versions SupportCandy versions through 3.4.1 Description A Cross-Site Request Forgery CSRF issue exists in PSM Plugins SupportCandy. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge...

PT-2025-49885

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

WordPress plugin Simple Folio 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Rencontre 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

Enalean Tuleap 跨站请求伪造漏洞

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A cross-site request forgery vulnerability exists in Enalean Tuleap that stems from a tracker field dependency lacking CSRF protection, whic...