43838 matches found
CVE-2025-62992
Technical details for CVE-2025-62992 are not publicly available in the provided connected documents. The Initial Description notes a CSRF/Path Traversal issue in Everest Backup
CVE-2025-68885
Cross-Site Request Forgery CSRF vulnerability in page-carbajal Custom Post Status custom-post-status allows Stored XSS.This issue affects Custom Post Status: from n/a through = 1.1.0...
WordPress Custom Post Status plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Skalucy in WordPress Plugin Custom Post Status versions = 1.1.0...
CVE-2025-49354 WordPress Recent Posts From Each Category plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Mindstien Technologies Recent Posts From Each Category recent-posts-from-each-category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through = 1.4...
EUVD-2025-205881
Cross-Site Request Forgery CSRF vulnerability in Socialprofilr Social Profilr allows Stored XSS.This issue affects Social Profilr: from n/a through 1.0...
EUVD-2025-205873
Cross-Site Request Forgery CSRF vulnerability in eLEOPARD Behance Portfolio Manager allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through 1.7.5...
EUVD-2022-55924
JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...
PT-2025-54335
Name of the Vulnerable Software and Affected Versions Jayce53 EasyIndex versions through 1.1.1704 Description A Cross-Site Request Forgery CSRF issue exists in Jayce53 EasyIndex. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The issue affec...
WordPress plugin OpenHook 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
PT-2025-54303
Name of the Vulnerable Software and Affected Versions Everest Backup versions through 2.3.9 Description A Cross-Site Request Forgery CSRF issue exists in Everest Backup, potentially allowing Path Traversal. Recommendations Versions prior to 2.3.9 are affected. At the moment, there is no informati...
WordPress CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin <= 4.2 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by luckybuddy in WordPress Plugin cits-support-svg-webp-media-upload versions = 4.2...
PT-2025-54360
Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...
PT-2025-54337
Name of the Vulnerable Software and Affected Versions A WP Life Contact Form Widget versions through 1.5.1 Description A Cross-Site Request Forgery CSRF issue exists in A WP Life Contact Form Widget. This allows attackers to perform actions on behalf of authenticated users without their knowledge...
PT-2025-54336
Name of the Vulnerable Software and Affected Versions OpenHook versions through 4.3.1 Description A Cross-Site Request Forgery CSRF issue exists in OpenHook, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient protection against forg...
PT-2025-54377
Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through 4.2.0...
CVE-2022-50804 JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability
JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...
CVE-2025-52835
Technical details for CVE-2025-52835 are not provided in the supplied documents. No confirmation of affected products, impact, or fixes is available here; please monitor for updates from official advisories.
EUVD-2025-205805
Cross-Site Request Forgery CSRF vulnerability in ConoHa by GMO WING WordPress Migrator allows Upload a Web Shell to a Web Server.This issue affects WING WordPress Migrator: from n/a through 1.1.9...
EUVD-2025-205810
Cross-Site Request Forgery CSRF vulnerability in Merv Barrett Import into Easy Property Listings allows Cross Site Request Forgery.This issue affects Import into Easy Property Listings: from n/a through 2.2.1...