PT-2025-13498

Name of the Vulnerable Software and Affected Versions danielmuldernl OmniLeads Scripts and Tags Manager versions 1.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can execute malicious scripts on the victim's...

PT-2025-13508

Name of the Vulnerable Software and Affected Versions WP Database Optimizer versions 1.2.1.3 and earlier Description A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, as an attacker could potentiall...

PT-2025-13461

Name of the Vulnerable Software and Affected Versions Usermaven versions 1.2.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks a us...

PT-2025-13494

Name of the Vulnerable Software and Affected Versions bsndev Ultimate Security Checker versions n/a through 4.2 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking...

WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability

CSRF to Multiple Admin Actions vulnerability discovered by Psai in WordPress Plugin SimplyRETS Real Estate IDX versions = 3.0.5...

MAL-2025-2736 Malicious code in test-utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c296c435648a7ea93add03c751dc85edae75eeaf8f9e36b3059aa28846dc654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30872

Cross-Site Request Forgery CSRF vulnerability in Nitin Prakash Product Author for WooCommerce wc-product-author allows Cross Site Request Forgery.This issue affects Product Author for WooCommerce: from n/a through = 1.0.7...

CVE-2025-30833 WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Soft8Soft LLC Verge3D verge3d allows Cross Site Request Forgery.This issue affects Verge3D: from n/a through = 4.8.2...

PT-2025-13090

Name of the Vulnerable Software and Affected Versions Hesabfa Accounting versions 2.1.8 and earlier Description A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations For versions 2.1.8 and earlier, update t...

PT-2025-13140

Name of the Vulnerable Software and Affected Versions Custom Fields Account Registration For Woocommerce versions 1.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into...

PT-2025-13098

Name of the Vulnerable Software and Affected Versions Anthologize versions 0.8.2 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations For versions 0.8.2 and earlier, upda...

PT-2025-13086

Name of the Vulnerable Software and Affected Versions ValidateCertify versions 1.6.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker trick...

PT-2025-13162

Name of the Vulnerable Software and Affected Versions Gift Message for WooCommerce versions 1.7.8 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking th...

PT-2025-13123

Name of the Vulnerable Software and Affected Versions reCAPTCHA for all versions n/a through 2.22 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user into performing unintended...

PT-2025-13236

Name of the Vulnerable Software and Affected Versions Listings for Appfolio versions 1.2.0 and earlier Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into performing unintended...

PT-2025-13097

Name of the Vulnerable Software and Affected Versions Hakik Zaman Custom Login Logo versions 1.1.7 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations For versions 1.1.7...

PT-2025-13079

Name of the Vulnerable Software and Affected Versions Abu Bakar TWB Woocommerce Reviews versions 1.7.7 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-13081

Name of the Vulnerable Software and Affected Versions wpShopGermany IT-RECHT KANZLEI versions n/a through 2.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking th...

PT-2025-13126

Name of the Vulnerable Software and Affected Versions 3DPrint Lite versions 2.1.3.5 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations For versions 2.1.3.5 and earlier,...

PT-2025-13271

Name of the Vulnerable Software and Affected Versions Easy Booked – Appointment Booking and Scheduling Management System for WordPress versions through 2.4.5 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a...