PT-2026-78314

Name of the Vulnerable Software and Affected Versions Net::OAuth versions prior to 0.33 Description In the verify function, the software allows the sender to specify the signature algorithm via the signature method parameter of the incoming message. Because the verifying party cannot pin a specif...

CVE-2025-13408

The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the foxtoollogingoogle function. This makes it...