WordPress plugin JobZilla - Job Board WordPress Theme 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-34064

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.0.0 through 7.4.3.119 Liferay DXP versions 2023.Q3.1 through 2023.Q4.9 Liferay DXP versions 2024.Q1.1 through 2024.Q1.6 Description: The application lacks sufficient Cross-Site Request Forgery CSRF protection for...

WordPress plugin NEX-Forms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP Discord Post Plus – Supports Unlimited Channels 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin WP...

Open-Shop 安全漏洞

Open-Shop is a small program mall by a Chinese old-peanut individual developer. A security vulnerability exists in Open-Shop 1.0.0 and earlier versions, which stems from vulnerability to cross-site request forgery attacks that could lead to access to sensitive information...

WordPress plugin Cookie Warning 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-34039 · WordPress · Sendwp +1

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads versions prior to 3.5.1 Description: The Easy Digital Downloads plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validations in the edd sendwp disconnect and edd sendwp remote insta...

WordPress Inspiro Theme <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Inspiro Type Theme Vulnerable versions = 2.1.2 Fixed in 2.1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-8592 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID 4528bac00297 Credits Dmitrii Ignatyev Required...

CVE-2025-50902

Cross Site Request Forgery CSRF vulnerability in old-peanut Open-Shop aka old-peanut/wechatappletopensource thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message...

CVE-2025-50902

CVE-2025-50902 describes a CSRF vulnerability in the old-peanut Open-Shop project (aka old-peanut/wechat_applet__open_source) up to version 1.0.0. The underlying issue is a CSRF flaw that could allow an attacker to obtain sensitive information via crafted HTTP POST requests. Affected software is ...

WordPress plugin Chartify cross-site request forgery vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Chartify 3.5.3 and earlier version...

Open Solution QuickCMS 跨站请求伪造漏洞

Open Solution QuickCMS is an Open Solution open source content management system. A cross-site request forgery vulnerability exists in Open Solution QuickCMS version 6.8, which stems from vulnerability to cross-site request forgery attacks...

WordPress Add User Meta plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Add User Meta plugin, which stems from missing or incorrect validation of random numbers on the "add-user-meta...

PT-2025-33963 · WordPress · Wp Discord Post Plus – Supports Unlimited Channels

Name of the Vulnerable Software and Affected Versions: WP Discord Post Plus – Supports Unlimited Channels versions not specified through 1.0.2 Description: A Cross-Site Request Forgery CSRF issue exists in WP Discord Post Plus – Supports Unlimited Channels, allowing attackers to perform actions o...

WordPress plugin ads.txt Guru Connect 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-33932 · Unknown · Ads.Txt Guru Connect

Name of the Vulnerable Software and Affected Versions: ads.txt Guru Connect versions through 1.1.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in ads.txt Guru Connect, allowing attackers to perform unauthorized actions on behalf of authenticated users. This issue enables...

PT-2025-34148 · Old Peanut · Open-Shop

Name of the Vulnerable Software and Affected Versions: old-peanut Open-Shop versions through 1.0.0 Description: A Cross Site Request Forgery CSRF issue exists in old-peanut Open-Shop, allowing attackers to obtain sensitive information via a crafted HTTP Post message. Recommendations: At the momen...

WordPress Plugin Button Block Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Button Block 1.2.0 and prior...

CVE-2025-50902

Cross Site Request Forgery CSRF vulnerability in old-peanut Open-Shop aka old-peanut/wechatappletopensource thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message...

WordPress Easy Digital Downloads plugin <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions vulnerability

Cross-Site Request Forgery to Plugin Deactivation via eddsendwpdisconnect and eddsendwpremoteinstall Functions vulnerability discovered by wesley wcraft in WordPress Plugin Easy Digital Downloads versions = 3.5.0...