CVE-2025-9213

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

WordPress TextBuilder plugin 1.0.0-1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover vulnerability

Cross-Site Request Forgery to Privilege Escalation via Account Takeover vulnerability discovered by kr0d in WordPress Plugin TextBuilder versions 1.0.0-1.1.1...

EUVD-2025-32289

Malicious code in bioql PyPI...

CVE-2025-9213

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

CVE-2025-9213 TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

CVE-2025-9213 TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...

CVE-2025-9213

CVE-2025-9213 – TextBuilder (WordPress) CSRF to Privilege Escalation . TextBuilder plugin versions 1.0.0–1.1.1 are vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation in the handleToken function. An unauthenticated attacker could trick a site administrator into perf...