CVE-2025-23902

CVE-2025-23902 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Error Notification (Taras Dashkevych). Affected versions are listed as up to 0.2.7 (scope: from n/a through 0.2.7). The Red Hat advisory confirms the same CVE and description. There are no connected...

CVE-2025-23898 WordPress Apply with LinkedIn buttons plugin <= 2.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivobrett Apply with LinkedIn buttons apply-with-linkedin-buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through = 2.3...

CVE-2025-23884 WordPress Annie plugin <= 2.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Chris Roberts Annie annie allows Cross Site Request Forgery.This issue affects Annie: from n/a through = 2.1.1...

CVE-2025-23895 WordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...

CVE-2025-23880

CVE-2025-23880 describes a CSRF to Stored XSS in the amr personalise (WordPress plugin) up to version 2.10. Public sources (Red Hat RH CVE page and Wordfence vulnerability detail) confirm the issue affects amr personalise and indicate patch status is Unpatched. The description across connected do...

CVE-2025-23880 WordPress amr personalise plugin <= 2.10 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in anmari amr personalise amr-personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through = 2.10...

CVE-2025-23872 WordPress PayForm plugin <= 2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in payform PayForm payform allows Stored XSS.This issue affects PayForm: from n/a through = 2.0...

CVE-2025-23871 WordPress LSD Google Maps Embedder plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bas Matthee LSD Google Maps Embedder lsd-google-maps-embedder allows Cross Site Request Forgery.This issue affects LSD Google Maps Embedder: from n/a through = 1.1...

CVE-2025-23871

CVE-2025-23871 is a CSRF vulnerability in the LSD Google Maps Embedder. Public description indicates it affects versions up to 1.1, but the connected Red Hat entry only reiterates the CSRF issue without listing an available patch or fixed version. No exploits, mitigation steps, or precise remedia...

CVE-2025-23870 WordPress Copyright Safeguard Footer Notice plugin <= 3.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wygk Copyright Safeguard Footer Notice copyright-safeguard-footer-notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through = 3.0...

CVE-2025-23870

CVE-2025-23870 : CSRF in the WordPress plugin “Copyright Safeguard Footer Notice” enables Stored XSS in versions up to 3.0. Public details confirm the nature of the vulnerability and affected software; remediation status in connected sources indicates patch not yet available (Unpatched). Affected...

CVE-2025-23869

CVE-2025-23869 is a CSRF‑to‑Stored XSS vulnerability in the WordPress plugin CJ Custom Content (Shibu Lijack/CyberJack CJ Custom Content). Red Hat’s advisory confirms the issue affects CJ Custom Content from unknown/unspecified versions up to 2.0, enabling Stored XSS via CSRF. The available conne...

CVE-2025-23869 WordPress CJ Custom Content plugin <= 2.0 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in shibulijack CJ Custom Content cj-custom-content allows Stored XSS.This issue affects CJ Custom Content: from n/a through = 2.0...

CVE-2025-23861

CVE-2025-23861 is a CSRF vulnerability in Katz Web Services, Inc. Debt Calculator affecting Debt Calculator versions up to 1.0.1. Public details reference a CVSSv3.1 base score of 7.1 (High) with network attack vector, requiring user interaction. The Red Hat advisory confirms CSRF context. The in...

CVE-2025-23861 WordPress Debt Calculator plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Zack Katz Debt Calculator debt-calculator allows Cross Site Request Forgery.This issue affects Debt Calculator: from n/a through = 1.0.1...

CVE-2025-23842

CVE-2025-23842 is described in connected sources as a CSRF vulnerability in the Nilesh Shiragave WordPress Gallery Plugin, affecting WordPress Gallery Plugin versions from unknown through 1.4. The Red Hat entry reiterates the CSRF description. The connected documents do not provide concrete remed...

CVE-2025-23842 WordPress WordPress Gallery Plugin plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nilesh Shiragave WordPress Gallery Plugin wordpress-gallery-plugin allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin: from n/a through = 1.4...

CVE-2025-23842 WordPress WordPress Gallery Plugin plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nilesh Shiragave WordPress Gallery Plugin wordpress-gallery-plugin allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin: from n/a through = 1.4...

CVE-2025-23844 WordPress Custom Widget Classes plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jamsheer K Custom Widget Classes custom-widget-classes allows Cross Site Request Forgery.This issue affects Custom Widget Classes: from n/a through = 1.1...

CVE-2025-23828 WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...