CVE-2025-48353

CVE-2025-48353 : A CSRF to Stored XSS vulnerability exists in the dactum Clickbank WordPress Plugin (Niche Storefront). Affected component: Clickbank WordPress Plugin (Niche Storefront) versions up to and including 1.3.5. Root cause: CSRF enables stored XSS in the plugin; exploitation details are...

CVE-2025-48351

CVE-2025-48351 describes a CSRF to Stored XSS vulnerability in the WordPress plugin “Kento Splash Screen” affecting versions up to and including 1.4. The issue arises from cross-site request forgery that can lead to stored XSS payloads, with CVSS 3.1 base metrics indicating HIGH severity (7.1) an...

CVE-2025-48343 WordPress WPMU Ldap Authentication plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aaron Axelsen WPMU Ldap Authentication allows Stored XSS. This issue affects WPMU Ldap Authentication: from n/a through 5.0.1...

CVE-2025-48343

CVE-2025-48343 refers to a CSRF to Stored XSS vulnerability in the WordPress plugin WPMU Ldap Authentication (affected: versions

CVE-2025-48343 WordPress WPMU Ldap Authentication plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aaron Axelsen WPMU Ldap Authentication wpmuldap allows Stored XSS.This issue affects WPMU Ldap Authentication: from n/a through = 5.0.1...

CVE-2025-48325 WordPress WP Admin Theme plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in shmish111 WP Admin Theme allows Stored XSS. This issue affects WP Admin Theme: from n/a through 1.0...

CVE-2025-48321 WordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This issue affects Ultimate twitter profile widget: from n/a through = 1.0...

CVE-2025-48321

CVE-2025-48321 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Ultimate Twitter Profile Widget (versions up to 1.0). Affected: Ultimate Twitter Profile Widget from n/a through 1.0. CVSS 3.1 base score 7.1 (HIGH). Root cause/impact: CSRF condition enables stored XSS via the wi...

CVE-2025-48320

CVE-2025-48320 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin 百度分享按钮 (WordPress Baidu Share Button) that enables stored XSS. The issue affects the plugin versions from at least the earliest public disclosure up to version 1.0.6 . The CVE notes the vulnerabilit...

CVE-2025-48318 WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through = 1.2...

CVE-2025-48318

CVE-2025-48318 affects the WordPress plugin 多说社会化评论框 (versions

CVE-2025-48311

The CVE-2025-48311 entry concerns a CSRF vulnerability in OffClicks Invisible Optin (WordPress plugin) that also allows Stored XSS. Public details indicate the affected range is Invisible Optin versions n/a through 1.0. The issue combines CSRF with stored XSS, enabling an attacker to induce XSS t...

CVE-2025-48311 WordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through = 1.0...

CVE-2025-48311 WordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through = 1.0...

CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor allows Cross Site Request Forgery. This issue affects Table Editor: from n/a through 1.6.4...

CVE-2025-48310

The CVE-2025-48310 CSRF flaw affects the WordPress plugin Table Editor (wp-table-editor) up to version 1.6.4. Public sources include Patchstack/Wordfence entries and CVE records; the vulnerability allows CSRF actions by authenticated users. The Patchstack/Wordfence entries indicate the issue is s...

CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...

CVE-2025-48309 WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through = 1.0.1 Lite...

CVE-2025-48309 WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in web-able BetPress allows Stored XSS. This issue affects BetPress: from n/a through 1.0.1 Lite...

CVE-2025-48308

CVE-2025-48308 discusses a CSRF vulnerability in the Newsletter subscription optin module (versions up to 1.2.9) that can lead to Stored XSS. Affected software: Newsletter subscription optin module. Root cause: CSRF enabling stored XSS. Impact per sources: potential for stored XSS with low to mod...