CVE-2025-58224

Cross-Site Request Forgery CSRF vulnerability in Printeers Printeers Print & Ship invition-print-ship allows Cross Site Request Forgery.This issue affects Printeers Print & Ship: from n/a through = 1.17.0...

CVE-2025-58236

CVE-2025-58236 is a CSRF vulnerability in the WordPress plugin Force Update Translations. The vulnerability affects the plugin version range up to 0.5. According to the Wordfence vulnerability report, the issue is currently Unpatched, with no published fix at the time of that entry. The connected...

CVE-2025-58236 WordPress Force Update Translations plugin <= 0.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mayo Moriyama Force Update Translations force-update-translations allows Cross Site Request Forgery.This issue affects Force Update Translations: from n/a through = 0.5...

CVE-2025-58244

CVE-2025-58244 (Constructo) is a CSRF-related vulnerability in the Constructo WordPress theme that, per the provided documents, allows object injection. Affected software ranges to Constructo versions up to 4.3.9. The CVE description and related references (including Wordfence summaries) confirm ...

CVE-2025-58244 WordPress Constructo Theme <= 4.3.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...

CVE-2025-58250 WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ApusTheme Findgo fingo allows Authentication Bypass.This issue affects Findgo: from n/a through = 1.3.55...

CVE-2025-58250 WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ApusTheme Findgo fingo allows Authentication Bypass.This issue affects Findgo: from n/a through = 1.3.55...

CVE-2025-58250

CVE-2025-58250 describes a Cross-Site Request Forgery (CSRF) vulnerability in ApusTheme Findgo (WordPress). Affected: Findgo versions from n/a up to and including 1.3.55. Impact is listed as Authentication Bypass with a CVSS v3.1 base score of 8.8 (HIGH); attack vector NETWORK, complexity LOW, pr...

CVE-2025-58255

CVE-2025-58255 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Custom Post Type Images that allegedly enables Code Injection . The entry states affected versions are from n/a through 0.5 . Public metrics show a high-severity impact (CVSS 3.1/3.1: base score 9.6, CRITICAL, wi...

CVE-2025-58259

CVE-2025-58259 is a CSRF in the Nokri WordPress theme (ScriptsBundle) that affects Nokri: from n/a through 1.6.4. The CVSS 3.1 base score is 7.1 (HIGH) with AV:N/AC:L/PR:N/UI:R/S:U/I:L/A:H. The Connected Documents confirm the vulnerability in Nokri but do not provide a patch or remediation detail...

CVE-2025-58259 WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in scriptsbundle Nokri nokri allows Cross Site Request Forgery.This issue affects Nokri: from n/a through = 1.6.4...

CVE-2025-58261

CVE-2025-58261 is a CSRF-driven Stored XSS in the Mavis HTTPS to HTTP Redirection WordPress plugin (mavis-https-to-http-redirect) affecting versions up to 1.4.3. The entry shows CVSS 3.1 base score 7.1 (HIGH) with network attack vector, no privileges required, user interaction required, and CHANG...

CVE-2025-58262

Technical details for CVE-2025-58262 are not publicly available in the provided documents. The initial entry mentions a CSRF issue and Stored XSS in the Sweet Energy Efficiency plugin for WPDirectoryKit (

CVE-2025-58262 WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: from n/a through = 1.0.8...

CVE-2025-58262 WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: from n/a through = 1.0.8...

CVE-2025-58267 WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

CVE-2025-58268 WordPress WPMK PDF Generator Plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPMK WPMK PDF Generator wpmk-pdf-generator allows Stored XSS.This issue affects WPMK PDF Generator: from n/a through = 1.0.1...

CVE-2025-58268

Public technical details for CVE-2025-58268 are not provided in the supplied documents; no patch specifics or affected versions beyond what is stated in the Initial description.

CVE-2025-58270

CVE-2025-58270 is a Cross-Site Request Forgery (CSRF) vulnerability in NIX Anti-Spam Light . The WordPress plugin is affected for versions listed as “from n/a through 0.0.4.” The CVSS details from the connected data show a base score of 7.1 (High) , with network attack vector, low attack complexi...

CVE-2025-58657 WordPress Grid plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in EdwardBock Grid grid allows Stored XSS.This issue affects Grid: from n/a through = 2.3.1...