PT-2025-35015

Name of the Vulnerable Software and Affected Versions: WPMU Ldap Authentication versions n/a through 5.0.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Aaron Axelsen WPMU Ldap Authentication, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the...

PT-2025-34983

Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 Description: QuickCMS is susceptible to a Cross-Site Request Forgery CSRF issue in the page deletion functionality. A malicious actor can create a crafted website that, when visited by an administrator, automatically send...

WordPress plugin 百度分享按钮 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Bai...

WordPress plugin Savyour Affiliate Partner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin Google XML News Sitemap plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin Kento Splash Screen 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin SEO For Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin Ultimate twitter profile widget 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin BetPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress BetPress plugin suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming...

PT-2025-35025

Name of the Vulnerable Software and Affected Versions: Century ToolKit versions through 1.2.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Century ToolKit, allowing attackers to perform actions on behalf of an unsuspecting user. This issue enables Cross Site Request...

PT-2025-34999

Name of the Vulnerable Software and Affected Versions: wptableeditor Table Editor versions n/a through 1.6.4 Description: A Cross-Site Request Forgery CSRF issue exists in wptableeditor Table Editor, allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update...

PT-2025-35027

Name of the Vulnerable Software and Affected Versions: thaihavnn07 ATT YouTube Widget versions through 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in the thaihavnn07 ATT YouTube Widget, which can lead to Stored Cross-Site Scripting XSS. Recommendations: Update...

WordPress plugin XM-Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin ATT YouTube Widget 跨站请求伪造漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin ATT YouTube Widget, no detaile...

PT-2025-35013

Name of the Vulnerable Software and Affected Versions: shmish111 WP Admin Theme versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability exists in shmish111 WP Admin Theme, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is no...

PT-2025-34995

Name of the Vulnerable Software and Affected Versions: Savyour Affiliate Partner versions through 2.1.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Savyour Affiliate Partner, which also allows Stored Cross-Site Scripting XSS. Recommendations: Update Savyour Affiliate...

WordPress plugin Video Share VOD 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-35030

Name of the Vulnerable Software and Affected Versions: Hesabfa Accounting versions through 2.2.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Hesabfa Accounting, allowing attackers to perform actions on behalf of authenticated users. This issue enables Cross Site Request...

PT-2025-35006

Cross-Site Request Forgery CSRF vulnerability in shen2 多说社会化评论框 allows Cross Site Request Forgery. This issue affects 多说社会化评论框: from n/a through 1.2...

PT-2025-34997

Name of the Vulnerable Software and Affected Versions: nonletter Newsletter subscription optin module versions through 1.2.9 Description: A Cross-Site Request Forgery CSRF vulnerability exists in the Newsletter subscription optin module, which also allows for Stored Cross-Site Scripting XSS...