CVE-2026-105154

Cross-Site Request Forgery CSRF in the Planet feed aggregator administration of Apache Roller 4.0 through 6.1.6 allows an unauthenticated attacker to make the Roller server fetch a URL the attacker chooses, including internal addresses, by inducing a logged-in global administrator to open a craft...

CVE-2026-124263 WordPress Locatoraid Store Locator plugin <= 3.9.75 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in plainware Locatoraid Store Locator locatoraid allows Cross Site Request Forgery.This issue affects Locatoraid Store Locator: from n/a through 3.9.75...

EUVD-2026-123419

Cross-Site Request Forgery CSRF vulnerability in plainware Locatoraid Store Locator locatoraid allows Cross Site Request Forgery.This issue affects Locatoraid Store Locator: from n/a through 3.9.75...

CVE-2026-124263

The Locatoraid Store Locator WordPress plugin (versions

WordPress Locatoraid Store Locator plugin <= 3.9.75 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by peppa in WordPress Plugin Locatoraid Store Locator versions = 3.9.75...

CVE-2026-125784

Cross-Site Request Forgery CSRF vulnerability in Magnigenie RestroPress restropress allows Cross Site Request Forgery.This issue affects RestroPress: from n/a through 3.4.11...

CVE-2026-121770

Cross-Site Request Forgery CSRF vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Site Request Forgery.This issue affects VISeek: from n/a through 1.0.5...

CVE-2026-125446 WordPress Edwiser Bridge plugin <= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4...

EUVD-2026-123399

Cross-Site Request Forgery CSRF vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4...

CVE-2026-125446

The WisdmLabs Edwiser Bridge WordPress plugin (versions

EUVD-2026-123398

Cross-Site Request Forgery CSRF vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD Infomaniak: from n/a through 1.5.16...

CVE-2026-125445

The WordPress VOD Infomaniak plugin (versions

CVE-2026-125445 WordPress VOD Infomaniak plugin <= 1.5.16 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD Infomaniak: from n/a through 1.5.16...

WordPress VOD Infomaniak plugin <= 1.5.16 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by neurotx in WordPress Plugin VOD Infomaniak versions = 1.5.16...

WordPress Edwiser Bridge plugin <= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mor Golan in WordPress Plugin Edwiser Bridge versions = 4.3.4...

CVE-2026-121770

The VillaTheme VISeek WordPress plugin (viseek-easy-custom-search ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in versions up to and including 1.0.5 . This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. No specific root cause, exploi...

CVE-2026-121770 WordPress VISeek plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Site Request Forgery.This issue affects VISeek: from n/a through 1.0.5...

EUVD-2026-123383

Cross-Site Request Forgery CSRF vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Site Request Forgery.This issue affects VISeek: from n/a through 1.0.5...

WordPress VISeek plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Elieve in WordPress Plugin VISeek versions = 1.0.5...

CVE-2026-125784

The Magnigenie RestroPress WordPress plugin versions up to and including 3.4.11 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. While the vulnerability is identified as CWE-352 , ...