PT-2025-9828

Name of the Vulnerable Software and Affected Versions Spreadsheet Integration plugin for WordPress versions up to and including 3.8.2 Description The issue is related to Cross-Site Request Forgery due to improper nonce validation within the class-wpgsi-show.php script. This allows unauthenticated...

CVE-2025-1463: Cross-Site Request Forgery (CSRF)

The Spreadsheet Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to improper nonce validation within the class-wpgsi-show.php script. This makes it possible for unauthenticated attackers to publish arbitrary post...