CVE-2025-31410

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Church Donation wp-church-donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through = 1.7...

How Each Pillar of the 1st Amendment is Under Attack

" Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances." -U.S. Constitution,...

PT-2025-13747

Name of the Vulnerable Software and Affected Versions Appointy Appointment Scheduler versions n/a through 4.2.1 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-13700

Name of the Vulnerable Software and Affected Versions Kishan WP Link Preview versions n/d through 1.4.1 Description The issue is related to a Server-Side Request Forgery SSRF problem, which allows for Server-Side Request Forgery. This affects Kishan WP Link Preview, enabling unauthorized actions...

PT-2025-13847 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal Google Tag module, allowing unauthorized actions to be performed on behalf o...

PT-2025-13746

Name of the Vulnerable Software and Affected Versions DesignO versions n/a through 2.2.0 Description The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross Site Request Forgery. This is a type of attack where an attacker can trick a user into performing unintend...

PT-2025-13852 · Unknown · Configuration Split

Name of the Vulnerable Software and Affected Versions: Configuration Split versions 0.0.0 through 1.9.x Configuration Split versions 2.0.0 through 2.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Configuration Split module, allowing unauthorized actions to be performed. This...

PT-2025-13766

Name of the Vulnerable Software and Affected Versions Rich Text Editor versions 1.0.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Rich Text Editor. This vulnerability enables an attacker to perform unauthorized actions on a...

PT-2025-13848 · Drupal · Drupal Oauth2 Client

Name of the Vulnerable Software and Affected Versions: Drupal OAuth2 Client versions 0.0.0 through 4.1.2 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal OAuth2 Client, allowing unauthorized actions to be performed on behalf of the user. This issue may be exploited by an...

PT-2025-13758

Name of the Vulnerable Software and Affected Versions AB Google Map Travel versions n/a through 4.6 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on the...

PT-2025-13736

Name of the Vulnerable Software and Affected Versions Elfsight Testimonials Slider versions 1.0.1 and earlier Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-13676

Name of the Vulnerable Software and Affected Versions Ashish Ajani WP Church Donation versions 1.7 and earlier Description A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited by tricking a use...

PT-2025-13761 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: Varnish WordPress versions 1.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. The estimated number of potentially affected devices worldwide is not specified. There is no...

CVE-2025-31010 WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability

Cross-Site Request Forgery CSRF vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.0.5...

CVE-2025-2863

Cross-site request forgery CSRF vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend ...

CVE-2025-2863 Cross-site request forgery (CSRF) vulnerability in saTECH BCU

Cross-site request forgery CSRF vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend ...

CVE-2025-2863 Cross-site request forgery (CSRF) vulnerability in saTECH BCU

Cross-site request forgery CSRF vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend ...

MAL-2025-2749 Malicious code in contactbookmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4411a3fb5e56778179c647fb703b28d332d7b0f719ac7746b763317322a9a49a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2773 Malicious code in macos-relese (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398aca8803a64fcc22bd99f0a9ded72acd13a096dc268e6a30cabb2828066c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-13482

Name of the Vulnerable Software and Affected Versions WP Supersized versions n/a through 3.1.6 Description A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects WP Supersized, enabling Cross Site Request Forgery. Recommendation...