PT-2025-5138

Name of the Vulnerable Software and Affected Versions Nilesh Shiragave WordPress Gallery Plugin versions 1.4 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack...

PT-2025-5183 · Unknown · Genkisan Genki Announcement

Name of the Vulnerable Software and Affected Versions: Genkisan Genki Announcement versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be done by tricking the...

CVE-2024-57611

The content management system 07FLYCMS version V1.3.9 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability is located in the admin/doAdminAction.php?act=editShop&shopId endpoint, which may allow an attacker to perform unauthorized actions. To mitigate this risk, it is re...

PT-2025-5147

Name of the Vulnerable Software and Affected Versions Debt Calculator versions 1.0.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF problem, which allows unauthorized actions to be performed on a user's account without their knowledge. This can be done by tricking the user...

PT-2025-1914

Name of the Vulnerable Software and Affected Versions Passwords Manager plugin for WordPress versions up to and including 1.4.8 Description The issue is related to SQL injection through the $wpdb-prefix value in several AJAX actions due to insufficient escaping on the user-supplied parameter and...

PT-2025-4840

Name of the Vulnerable Software and Affected Versions Librenms versions up to 24.10.1 Description The issue is a stored XSS that affects the parameters of the /device/$DEVICE ID/edit endpoint, specifically the display parameter. This allows remote attackers to inject malicious scripts, which...

PT-2025-3481

Name of the Vulnerable Software and Affected Versions 07FLYCMS version 1.3.9 Description The issue is related to Cross-Site Request Forgery CSRF that occurs via the "admin/doAdminAction.php?act=editShop&shopId" endpoint. This allows for unauthorized actions to be performed. Recommendations For...

PT-2025-5074 · Unknown · W3Speedster

Name of the Vulnerable Software and Affected Versions: W3SPEEDSTER versions 7.33 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows unauthorized actions to be performed on a user's account without their knowledge or consent. This is a type of...

CVE-2024-57611

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via admin/doAdminAction.php?act=editShop&shopId...

CVE-2025-23200: Improper Neutralization of Input During Web Page Generation

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: ajaxform.php - param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

PT-2025-5157

Name of the Vulnerable Software and Affected Versions LSD Google Maps Embedder versions n/a through 1.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a...

PT-2025-5105

Name of the Vulnerable Software and Affected Versions SEOReseller Partner versions prior to 1.3.15 Description The issue is a Cross-Site Request Forgery CSRF problem, which allows unauthorized actions to be performed on behalf of a user without their knowledge. This can lead to various security...

PT-2025-4883 · Easy Tynt · Easy Tynt

Name of the Vulnerable Software and Affected Versions: Easy Tynt versions 0.2.5.1 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue can be exploited to perform Cross Site Request Forgery. Recommendations: F...

LibreNMS cross-site scripting vulnerabilities

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. A cross-site scripting vulnerability exists in LibreNMS version 24.10.1, which stems fro...

PT-2025-5119

Name of the Vulnerable Software and Affected Versions Aleapp WP Cookies Alert versions n/a through 1.1.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a...

PT-2025-5120

Name of the Vulnerable Software and Affected Versions Cornea Alexandru Category Custom Fields versions n/a through 1.0 Description The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user into performin...

GitLab EE/CE Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper management of user actions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-1913 · WordPress · Passwords Manager

Name of the Vulnerable Software and Affected Versions: Passwords Manager plugin for WordPress versions up to, and including, 1.4.8 Description: The issue is related to a missing capability check on the pms save setting and post new pass AJAX actions. This allows authenticated attackers with...

PT-2025-5185

Name of the Vulnerable Software and Affected Versions Error Notification versions 0.2.7 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability in Error Notification, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

PT-2025-5118

Name of the Vulnerable Software and Affected Versions Laxman Thapa Content Security Policy Pro versions 1.3.5 and earlier Description A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue can be exploited to perform Cross-Site Request...