CVE-2025-8606: Cross-Site Request Forgery (CSRF)

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activateplugin and deactivateplugin functions. This makes it possible for attackers to tri...

WordPress Better WordPress reCAPTCHA plugin <= 2.0.3 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Gabriel Avramescu in WordPress Better WordPress reCAPTCHA plugin versions = 2.0.3. Solution WordPress Better WordPress reCAPTCHA plugin was closed on 2018 November 9 and is no longer available for download. Please deactivate and...