CVE-2025-49865 WordPress Advanced Settings plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Request Forgery.This issue affects Advanced Settings: from n/a through = 3.0.1...

PT-2025-25717 · Cyberchimps · Cyberchimps Responsive Plus

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Plus versions 3.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 3.2....

CVE-2025-6001

A Cross-Site Request Forgery CSRF vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager...

CVE-2025-41661

An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery CSRF protection...

WordPress WP Sliding Login/Dashboard Panel plugin <= 2.1.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin WP Sliding Login/Dashboard Panel versions = 2.1.1...

CVE-2025-6001

A Cross-Site Request Forgery CSRF vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager...

CVE-2025-6001 VirtueMart - Cross Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager...

CVE-2025-41661 Weidmueller: Security routers IE-SR-2TX are affected by CSRF

An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery CSRF protection...

CVE-2025-41661 Weidmueller: Security routers IE-SR-2TX are affected by CSRF

An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery CSRF protection...

CVE-2025-36576

CVE-2025-36576 affects Dell Wyse Management Suite (WMS) prior to 5.2. A CSRF weakness could allow a high-privileged attacker with remote access to trigger server-side request forgery. Some sources (e.g., PT-2025-24898, Red Hat/CVE entries) corroborate the issue as a pre-5.2 vulnerability. Remedia...

CVE-2025-49510

CVE-2025-49510 is a CSRF vulnerability in the WordPress plugin Min Max Step Quantity Limits Manager for WooCommerce. Affected versions are up to and including 5.1.0. Remediation is available in version 5.1.0 (patched). No exploitation details are provided in the connected documents.

CVE-2025-49510 WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory Min Max Step Quantity Limits Manager for WooCommerce allows Cross Site Request Forgery.This issue affects Min Max Step Quantity Limits Manager for WooCommerce: from n/a through 5.1.0...

CVE-2025-49511

CVE-2025-49511 : CSRF in Civi Framework (WordPress plugin) affects Civi Framework up to 2.1.6.x (CNVD lists 2.1.6.3). Root cause: insufficient verification of request origin leading to unauthorized actions. Exploitation details not provided in the documents. According to connected CNVD entry, pat...

WordPress plugin Bunnys Print CSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Bunnys Print CSS plugin that stems from missing or incorrect nonce validation of the pcssoptionssubpanel...

PT-2025-24657 · WordPress · Wpfactory Min Max Step Quantity Limits Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPFactory Min Max Step Quantity Limits Manager for WooCommerce versions 5.1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows unauthorized actions to be performed on behalf of a user. This...

PT-2025-24898 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2025-30986

Cross-Site Request Forgery CSRF vulnerability in CreativeMedia Elite Video Player elite-video-player allows Cross Site Request Forgery.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-30632

Cross-Site Request Forgery CSRF vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-29005

Cross-Site Request Forgery CSRF vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Cross Site Request Forgery.This issue affects HR Management Lite: from n/a through = 3.6...

CVE-2025-49285

Cross-Site Request Forgery CSRF vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Cross Site Request Forgery.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 3.8.0...