CVE-2025-23577

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: from n/a through = 1.3...

EUVD-2025-3259

Malicious code in bioql PyPI...

CVE-2025-23577

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: from n/a through = 1.3...

CVE-2025-23577 WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: from n/a through = 1.3...

CVE-2025-23577 WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3...

CVE-2025-23577

CVE-2025-23577 describes a CSRF-to-Stored XSS issue in Word Freshener (WordPress plugin) affecting versions from n/a through 1.3. Public sources (RH CVE, ENISA EUVD, and Wordfence report) corroborate the existence of the CSRF path enabling stored XSS, but do not provide definitive vector details ...

WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Word Freshener versions = 1.3...

WordPress plugin Word Freshener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... WordPress plugin...

PT-2025-4949 · Unknown · Sourov Amin Word Freshener

Name of the Vulnerable Software and Affected Versions: Sourov Amin Word Freshener versions 1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a w...