CVE-2025-2319

creationtimestamp| type| source ---|---|--- 2025-03-25 09:24:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8631 2025-03-25 10:01:07+00:00| published-proof-of-concept| Telegram/d874YtfjRzSeJrj5ty8uatKWcKwQKjZYN7PQfn69YdZXOI 2025-03-25 10:49:26+00:00| seen|...

CVE-2025-2319 EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTSmenu' function. This makes it possible for unauthenticated attackers to...

CVE-2025-2319 EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTSmenu' function. This makes it possible for unauthenticated attackers to...