CVE-2025-25103

Cross-Site Request Forgery CSRF vulnerability in bnielsen Indeed API indeed-api allows Cross Site Request Forgery.This issue affects Indeed API: from n/a through = 0.5...

CVE-2025-25103

CVE-2025-25103 describes a CSRF to settings change vulnerability in the WordPress Indeed API Plugin, affecting versions up to 0.5. The issue allows CSRF exploits to alter settings without user consent. Public documentation confirms the affected plugin/version range and the CSRF root cause; patch ...

PT-2025-5932 · Unknown · Bnielsen Indeed Api

Name of the Vulnerable Software and Affected Versions: bnielsen Indeed API versions 0.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is achieved by tricking the user into...