CVE-2025-24699

CVE-2025-24699 : WordPress WP Coder plugin is affected (versions up to 3.6). The issue is a CSRF that enables Cross‑Site Scripting (XSS) via the vulnerable plugin code. Public records identify the nature of the vulnerability as CSRF to XSS in WP Coder <= 3.6. Red Hat/RedHat-related and CVE dat...

PT-2025-7034

Name of the Vulnerable Software and Affected Versions: Wow-Company WP Coder versions 3.6 and earlier Description: A Cross-Site Request Forgery CSRF issue allows Cross-Site Scripting XSS. This means an attacker can trick a user into performing unintended actions on a web application, potentially...

CVE-2025-24699: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...