CVE-2024-56299 WordPress Notify Odoo plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pektsekye Notify Odoo notify-odoo allows Stored XSS.This issue affects Notify Odoo: from n/a through = 1.0.0...

CVE-2025-22297 WordPress AI WP Writer plugin <= 3.8.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AIpost AI WP Writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through 3.8.4.4...

CVE-2025-22297

CVE-2025-22297 (AI WP Writer) has a Cross-Site Request Forgery vulnerability in the plugin for WordPress, reported for AI WP Writer versions up to 3.8.4.4. The NVD entry lists a CVSS v3.1 vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 4.3 (Medium). Public references p...

CVE-2025-22301 WordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in zookatron MyBookTable Bookstore mybooktable allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore: from n/a through = 3.5.3...

CVE-2025-22325

CVE-2025-22325 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Autocompleter plugin by Nik Chankov that permits a Stored XSS. Public records indicate the flaw affects Autocompleter versions from unknown up to 1.3.5.2. The root cause, as stated, is CSRF enabling Stored XSS, but ...

CVE-2025-22325 WordPress Autocompleter plugin <= 1.3.5.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through = 1.3.5.2...

CVE-2025-22336

CVE-2025-22336 affects Wizhi Multi Filters by Wenprise (WordPress). The vulnerability is a CSRF that enables Stored XSS, affecting versions up to 1.8.6. CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW confidentiality/integrity/availability impact, and UI interaction required. Conne...

CVE-2025-22342 WordPress WP Simple Sitemap plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jens Törnell WP Simple Sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through 0.2...

CVE-2025-22343

CVE-2025-22343 is a wpSOL vulnerability described as a CSRF to Stored XSS affecting wpSOL up to version 1.2.0. The connected Red Hat/Wordfence records confirm the issue exists in wpSOL and state Patch Status: Unpatched. No public exploit details or fixes are provided in the connected documents. A...

CVE-2025-22347 WordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through = 3.9...

CVE-2025-22347

CVE-2025-22347 describes a Cross-Site Request Forgery that enables Blind SQL Injection in the BSK Forms Blacklist plugin for BannerSky.com, affecting versions up to 3.9. The Red Hat advisory corroborates the CSRF/SQL-injection pattern for this plugin family, noting the vulnerability context as Au...

CVE-2025-22347 WordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through = 3.9...

PT-2025-1805 · WordPress · Viewmedica 9

Name of the Vulnerable Software and Affected Versions: ViewMedica 9 plugin for WordPress versions up to, and including, 1.4.15 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This allows unauthenticated attackers to injec...

PT-2025-4578 · Unknown · Prayer Times Anywhere

Name of the Vulnerable Software and Affected Versions: Prayer Times Anywhere versions prior to 2.0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.4.3...

CVE-2024-55076

Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password...

WordPress wpSOL plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin wpSOL versions = 1.2.0...

CVE-2024-37237 WordPress FS Poster plugin <= 6.5.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in FS-code FS Poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through 6.5.8...

CVE-2024-37237

CVE-2024-37237 is a CSRF vulnerability reported for the WordPress FS Poster plugin, affecting versions up to 6.5.8. The vulnerability description states a Cross-Site Request Forgery issue in FS Poster, but the provided documents do not specify the root cause detail beyond CSRF, nor confirm a patc...

CVE-2024-37241 WordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0...