WordPress Findgo Theme <= 1.3.55 is vulnerable to Cross Site Request Forgery (CSRF)

Software Findgo Type Theme Vulnerable versions = 1.3.55 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-58250 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 3d6b8977539c Credits Tran Nguyen Bao Khanh VCI - VN...

WordPress plugin Findgo 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38810

Name of the Vulnerable Software and Affected Versions TravelMap versions through 1.0.3 Description A Cross-Site Request Forgery CSRF issue exists in TravelMap Travel Map. This allows attackers to potentially perform actions on behalf of unsuspecting users. Recommendations Update TravelMap to a...

PT-2025-38885

Name of the Vulnerable Software and Affected Versions LIJE Show Pages List versions through 1.2.0 Description A Cross-Site Request Forgery CSRF issue exists in LIJE Show Pages List. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The issue...

PT-2025-38963

Name of the Vulnerable Software and Affected Versions Interact: Embed A Quiz On Your Site versions through 3.1 Description A Cross-Site Request Forgery CSRF issue exists in Interact: Embed A Quiz On Your Site. This allows attackers to perform actions on behalf of an unsuspecting user...

WordPress plugin LWS Affiliation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

WordPress plugin LinkedInclude 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Interact Embed A Quiz On Your Site 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers...

PT-2025-38781

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description A Cross-Site Request Forgery CSRF issue exists in Double the Donation. This allows attackers to potentially perform actions on behalf of an authenticated user without their knowledge...

PT-2025-38946

Name of the Vulnerable Software and Affected Versions EdwardBock Grid versions through 2.3.1 Description A Cross-Site Request Forgery CSRF issue exists in EdwardBock Grid, which also allows Stored Cross-Site Scripting XSS. This allows malicious actors to potentially perform actions on behalf of a...

WordPress Nokri Theme <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Nokri Type Theme Vulnerable versions = 1.6.4 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2025-58259 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2379088ca94b Credits Tran Nguyen Bao Khanh VCI -...

PT-2025-39012

Name of the Vulnerable Software and Affected Versions RIS Version Switcher versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in RIS Version Switcher – Downgrade or Upgrade WP Versions Easily. This allows attackers to perform actions on behalf of an authenticated user...

PT-2025-38765

Name of the Vulnerable Software and Affected Versions Deliver via Shipos for WooCommerce versions through 3.0.2 Description A Cross-Site Request Forgery CSRF issue exists in Deliver via Shipos for WooCommerce. This allows attackers to perform actions on behalf of authenticated users...

PT-2025-38766

Name of the Vulnerable Software and Affected Versions TOCHAT.BE versions n/a through 1.3.4 Description A Cross-Site Request Forgery CSRF issue exists in César Martín TOCHAT.BE. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The issue affects...

WordPress Constructo Theme <= 4.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Constructo Type Theme Vulnerable versions = 4.3.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-58244 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 60cf627805f3 Credits Tran Nguyen Bao Khanh VCI -...

PT-2025-38965

Name of the Vulnerable Software and Affected Versions ShrinkTheWeb STW Website Previews versions through 2.8.5 Description A Cross-Site Request Forgery CSRF issue exists in ShrinkTheWeb STW Website Previews, which also allows Stored Cross-Site Scripting XSS. This allows an attacker to perform...

PT-2025-38828

Name of the Vulnerable Software and Affected Versions themespride Advanced Appointment Booking & Scheduling versions through 1.9 Description A Cross-Site Request Forgery CSRF issue exists in themespride Advanced Appointment Booking & Scheduling. This allows attackers to perform actions on behalf ...

WordPress plugin RIS Version Switcher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin SALESmanago 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

WordPress plugin SV Proven Expert 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...