CVE-2025-53193 WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...

CVE-2025-53193

CVE-2025-53193 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Burst Statistics” by Burst Statistics B.V. Affected versions are n/a through 2.0.6. The CVSS base score is 4.3 (Medium) with network attack vector, low attack complexity, no privileges required, bu...

CVE-2025-53193 WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...

PT-2025-27184 · Infigo · Is-Theme-Companion

Name of the Vulnerable Software and Affected Versions: Infigo Software IS-theme-companion versions 1.57 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Object Injection. Recommendations: For Infigo Software IS-theme-companion versions 1.57 and...

PT-2025-27168 · WordPress · Wp Youtube Live

Name of the Vulnerable Software and Affected Versions: WP YouTube Live versions 1.10.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For WP YouTube Live versions 1.10.0 and earlier, update to a version that...

PT-2025-27179 · Unknown · Opicron Image Cleanup

Name of the Vulnerable Software and Affected Versions: opicron Image Cleanup versions 1.9.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the opicron Image Cleanup, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For opicron Image...

CVE-2025-50369

A Cross-Site Request Forgery CSRF vulnerability exists in the Manage Card functionality /mcgs/admin/manage-card.php of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying...

PT-2025-27214 · Acmeedesign · Wpshapere Lite

Name of the Vulnerable Software and Affected Versions: AcmeeDesign WPShapere Lite versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For AcmeeDesign WPShapere Lite versions 1.4 and earlier, update to a versio...

CVE-2025-50370

CVE-2025-50370 affects Phpgurukul Medical Card Generation System 1.0, specifically the Inquiry Management endpoint /mcgs/admin/readenq.php. A CSRF flaw exists where an authenticated admin can delete inquiry records via a simple GET request without CSRF token or origin validation. This is supporte...

WordPress WP GDPR Cookie Consent Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP GDPR Cookie Consent Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53316 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID aa421b31b5f1 Credits Skalucy Requir...

PT-2025-27181 · WordPress · Hossin Asaadi Wp Permalink Translator

Name of the Vulnerable Software and Affected Versions: Hossin Asaadi WP Permalink Translator versions 1.7.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

PT-2025-27176 · Unknown · My Wp Brand

Name of the Vulnerable Software and Affected Versions: My Wp Brand versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.1.3 and earlier, update to a version that contains a fi...

PT-2025-27223 · Unknown · Samcharrington Rss Digest

Name of the Vulnerable Software and Affected Versions: samcharrington RSS Digest versions n/a through 1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

PT-2025-27211 · Unknown · Plumwd Twitch Tv Embed Suite

Name of the Vulnerable Software and Affected Versions: plumwd Twitch TV Embed Suite versions n/a through 2.1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the plumwd Twitch TV Embed Suite. Recommendations: For versions n/a through 2.1.0,...

CVE-2025-48921 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-50179 Tuleap missing CSRF protection on tracker reports manipulation

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims...

CVE-2025-48991 Tuleap missing CSRF protection on tracker canned responses administration

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to version 16.8.99.1748845907 and Tuleap Enterprise Edition prior to versions 16.8-3 and 16.7-5 to trick victims into...

ROS-20250625-04

A vulnerability in the Ruby on Rails software platform is related to a CSRF vulnerability in the rails-ujs module. Exploitation of the vulnerability could allow an attacker acting remotely to send CSRF tokens to the wrong domains. invalid domains...

CVE-2025-52794

Cross-Site Request Forgery CSRF vulnerability in Creative-Solutions Creative Contact Form sexy-contact-form allows Stored XSS.This issue affects Creative Contact Form: from n/a through = 1.0.0...

CVE-2025-52795

Cross-Site Request Forgery CSRF vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Cross Site Request Forgery.This issue affects WP Front User Submit / Front Editor: from n/a through = 5.0.6...