WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Post Featured Video versions = 1.7...

WordPress Video Blogster Lite Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Video Blogster Lite versions = 1.2...

CVE-2025-60137

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through = 1.7...

CVE-2025-60137 WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through = 1.7...

CVE-2025-60137

CVE-2025-60137 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Post Featured Video . The issue affects the plugin’s Post Featured Video feature in versions from unknown to and including 1.7 . The CVSS vector in the entry shows a base score of 4.3 (Medium) with ...

CVE-2025-60137 WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through = 1.7...

WordPress plugin Post Featured Video 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-39580

Name of the Vulnerable Software and Affected Versions Galaxy Weblinks Post Featured Video versions through 1.7 Description A Cross-Site Request Forgery issue exists in Galaxy Weblinks Post Featured Video. This allows for Cross Site Request Forgery attacks. Recommendations At the moment, there is ...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27033

Information disclosure while running video usecase having rogue firmware...

drm/vc4: don't check if plane->state->fb == state->fb

...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27033

Information disclosure while running video usecase having rogue firmware...

CVE-2025-47316

The CVE-2025-47316 entry describes a memory corruption issue caused by a double free when multiple threads race to set the timestamp store. The vulnerability is characterized as a local attack with high impact on confidentiality, integrity, and availability per the provided metrics (CVSS 3.1: AV:...

CVE-2025-47316 Double Free in Video

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-47316 Double Free in Video

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-27036 Buffer Over-read in Video

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036 Buffer Over-read in Video

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

CVE-2025-27036 concerns Qualcomm chipsets with a vulnerability in the Video engine’s handling of input data smaller than the expected minimum size. Root cause: a buffer/processing mismatch in the video engine leads to information disclosure. Affected: Qualcomm chipsets (Video engine component); e...

CVE-2025-27033

CVE-2025-27033 is described as an information-disclosure issue related to video processing on Qualcomm chipsets under rogue firmware. Connected sources (Pixel Watch bulletin) classify it under Qualcomm components with a moderate severity and identify Video as the affected subcomponent. The vulner...