2 matches found
CVE-2025-9631 AutoCatSet <= 2.1.4 - Cross-Site Request Forgery
The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4. This is due to missing or incorrect nonce validation on the autocatsetajax function. This makes it possible for unauthenticated attackers to trigger automatic...
4.3CVSS4.9AI score0.00162EPSS
SaveExploits0References3
CVE-2025-9631: Cross-Site Request Forgery (CSRF)
The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4. This is due to missing or incorrect nonce validation on the autocatsetajax function. This makes it possible for unauthenticated attackers to trigger automatic...
4.3CVSS5.5AI score0.00162EPSS
SaveExploits0References1
20