50785 matches found
CVE-2025-9621 WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery
The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation on the wpcmtsync action in the wpcmtrequesthandler function. This makes it possible for unauthenticated...
WordPress plugin Course Redirects for Learndash 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...
CVE-2025-61930
Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery CSRF on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without...
PT-2025-41330
Name of the Vulnerable Software and Affected Versions WP Go Maps plugin for WordPress versions prior to 9.0.46 Description The WP Go Maps plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. The plugin exposes state-changing REST actions through an AJAX bridge without appropria...
EUVD-2021-1329
Malware in sbrugna...
EUVD-2020-21103
Malware in sbrugna...
EUVD-2008-3923
Malware in sbrugna...
EUVD-2021-26481
Malware in sbrugna...
EUVD-2019-6930
Malware in sbrugna...
EUVD-2015-9262
Malware in sbrugna...
EUVD-2011-1664
Malware in sbrugna...
EUVD-2020-0429
Malware in sbrugna...
EUVD-2007-0194
Malware in sbrugna...
EUVD-2021-11877
Malware in sbrugna...
EUVD-2009-4943
Malware in sbrugna...
EUVD-2021-11848
Malware in sbrugna...
EUVD-2019-0031
Malware in sbrugna...
EUVD-2020-17763
Malware in sbrugna...