CVE-2025-22555 WordPress Smoothness Slider Shortcode plugin <= v1.2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Noel Jarencio. Smoothness Slider Shortcode allows Cross Site Request Forgery.This issue affects Smoothness Slider Shortcode: from n/a through v1.2.2...

CVE-2025-22559 WordPress TubePress.NET Plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tubepress TubePress.NET tubepressnet allows Cross Site Request Forgery.This issue affects TubePress.NET: from n/a through = 4.0.1...

CVE-2025-22559

CVE-2025-22559 : TubePress.NET suffers a Cross-Site Request Forgery (CSRF) issue up to version 4.0.1 that can lead to Stored Cross-Site Scripting (XSS). The linked Wordfence/mitigation data confirms the vulnerability class and affected scope but does not provide exploit steps, affected plugin dep...

CVE-2025-22571 WordPress Instabot plugin <= 1.10 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Instabot Instabot allows Cross Site Request Forgery.This issue affects Instabot: from n/a through 1.10...

CVE-2025-22582

CVE-2025-22582 is a CSRF-to-Stored-XSS vulnerability in the Uptime Robot WordPress plugin (Scott Nellé) affecting versions from n/a up to 0.1.3. The Connected Red Hat doc reiterates the CSRF/Stored XSS description; no exploitation details are provided. CVSS v3.1 base score is 7.1 (HIGH). No patch...

CVE-2025-22582 WordPress Uptime Robot plugin <= 0.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Nellé Uptime Robot allows Stored XSS.This issue affects Uptime Robot: from n/a through 0.1.3...

CVE-2025-22589

CVE-2025-22589 affects the Quote Tweet plugin (bozdoz Quote Tweet) for WordPress. The issue is a CSRF in the quote-tweet component that enables Stored XSS (affecting versions from n/a through ≤ 0.7). The CVSS 3.1 score is 7.1 (HIGH) with network attack vector, low confidentiality/integrity/availa...

CVE-2025-22589 WordPress Quote Tweet plugin <= 0.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through = 0.7...

CVE-2025-22590

CVE-2025-22590 describes a CSRF-induced Stored XSS in Prayer Times Anywhere (mmrs151 prayer-times-anywhere) for versions up to and including 2.0.1. The initial description notes the attacker can induce cross-site requests to cause stored cross-site scripting, but the documents do not provide conc...

CVE-2025-22593

CVE-2025-22593 affects Laika Pedigree Tree (

CVE-2025-22593 WordPress Laika Pedigree Tree plugin <= 1.4 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burria Laika Pedigree Tree laika-pedigree-tree allows Stored XSS.This issue affects Laika Pedigree Tree: from n/a through = 1.4...

WordPress JK Html To Pdf plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin JK Html To Pdf versions = 1.0.0...

WordPress News Publisher Autopilot plugin <= 2.1.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin News Publisher Autopilot versions = 2.1.4...

WordPress TubePress.NET Plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin TubePress.NET versions = 4.0.1...

WordPress Instabot plugin <= 1.10 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Instabot versions = 1.10...

CVE-2025-22336

Cross-Site Request Forgery CSRF vulnerability in Amos Lee（一刀） Wizhi Multi Filters by Wenprise wizhi-multi-filters allows Stored XSS.This issue affects Wizhi Multi Filters by Wenprise: from n/a through = 1.8.6...

CVE-2024-49294

CVE-2024-49294: Cross-Site Request Forgery in the WordPress plugin Bus Ticket Booking with Seat Reservation (WpBusTicketly) allows CSRF to trigger actions without user consent. Affected versions include up to 5.4.3 (n/a–5.4.3); remediation is to apply patched version 5.4.3. The CVE entry details ...

CVE-2024-49294 WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.4.3...

CVE-2024-49294 WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through = 5.4.3...

CVE-2024-51700 WordPress NAVER Analytics plugin <= 0.9 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eutrue NAVER Analytics naver-analytics allows Stored XSS.This issue affects NAVER Analytics: from n/a through = 0.9...