CVE-2026-89237

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

CVE-2026-89237

The Bluff Post WordPress plugin (versions through 1.1.1 ) is vulnerable to an unauthenticated SQL injection . The root cause is the failure to sanitize and escape parameters—specifically the 'table_name' and 'column_name' parameters—before using them as identifiers in a SQL query. This allows an ...

CVE-2026-89237 Bluff Post <= 1.1.1 - Unauthenticated SQLi via 'table_name' and 'column_name' Parameters

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

EUVD-2026-87527

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the database...

EUVD-2025-28462

Malicious code in bioql PyPI...

WordPress Bluff Post plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Bluff Post plugin that stems from the WEB application not adequately verifying that a request is from a truste...

CVE-2025-52784

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784

CVE-2025-52784 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Bluff Post WordPress plugin that allows Stored XSS. Affected software: Bluff Post versions from 0 through 1.1.1 (as stated). Root cause: insufficient CSRF protection enabling stored payload execution. Public sources...

CVE-2025-52784 WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

PT-2025-26416 · Unknown · Bluff Post

Name of the Vulnerable Software and Affected Versions: Bluff Post versions 1.1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web application,...

CVE-2025-52784: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

WordPress plugin Bluff Post 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Bluff Post plugin that stems from the WEB application not adequately verifying that a request is from a truste...

WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bluff Post versions = 1.1.1...