CVE-2026-16296 Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-defaul...

CVE-2026-16296

The CVE-2026-16296 entry applies to the Clearfy Cache WordPress plugin, affected versions before 2.4.3. The issue is described as the Cyrlitera old-URL redirect handler not validating the redirect target, passing a decoded request URI to an unsafe redirect function. This allows unauthenticated at...

EUVD-2025-19392

Malicious code in bioql PyPI...

CVE-2025-53254

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

CVE-2025-53254

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

CVE-2025-53254 WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

CVE-2025-53254

CVE-2025-53254 CSRF in WordPress Cyrlitera plugin (versions up to 1.2.0) affects Cyrlitera transliteration functionality. Public sources list the vulnerability as CSRF (CVSS v3.1 base score 4.3, Medium) with unauthenticated users able to cause unauthorized actions. Connected references indicate a...

CVE-2025-53254 WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...

WordPress plugin Cyrlitera 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-27161 · Cyrlitera · Cyrlitera

Name of the Vulnerable Software and Affected Versions: Cyrlitera versions 1.2.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.2.0 and earlier, update to a...