93817 matches found
EUVD-2026-48118
Unauthenticated Cross Site Request Forgery CSRF in WP Activity Log = 5.6.4 versions...
CVE-2026-65512 WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...
EUVD-2026-48107
Author Server Side Request Forgery SSRF in Complianz = 7.5.0 versions...
CVE-2026-65496
CVE-2026-65496 affects the WordPress Complianz plugin (versions ≤ 7.5.0). The description indicates an Author SSRF in Complianz ≤ 7.5.0. CVSSv3.1 base score 4.4 (Network attack, High complexity, Privileges Required: High, No user interaction; Confidentiality and Integrity Low, Availability None; ...
EUVD-2026-48099
Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65488
The CVE concerns the WordPress plugin LA-Studio Element Kit for Elementor, version <= 1.6.2. It describes an unauthenticated Cross-Site Request Forgery (CSRF) that can lead to Stored XSS. The issue originates from the plugin’s handling of CSRF, enabling an attacker to trigger stored XSS withou...
EUVD-2026-48083
Unauthenticated Cross Site Request Forgery CSRF in Avada Core = 5.15.6 versions...
CVE-2026-65471
The CVE-2026-65471 entry concerns unauthenticated Cross Site Request Forgery (CSRF) in the WordPress Avada Core plugin
EUVD-2026-48079
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
CVE-2026-65467
CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine
EUVD-2026-48078
Custom role Server Side Request Forgery SSRF in JetBooking = 4.1.2 versions...
CVE-2026-65466
CVE-2026-65466 concerns a Server Side Request Forgery (SSRF) in the WordPress JetBooking plugin <= 4.1.2 . The description specifies a custom role -driven SSRF vulnerability affecting JetBooking versions up to 4.1.2. The CVSSv3.1 metrics (source: Patchstack) indicate a network attack vector , ...
CVE-2026-65464
The CVE-2026-65464 entry describes an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in the WordPress GiveWP plugin, affecting versions up to 4.16.3. The available documents identify the vulnerability as CSRF but do not provide details on the affected files/components, root cause...
EUVD-2026-48076
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
EUVD-2026-48224
Unauthenticated Cross Site Request Forgery CSRF in Zarinpal Gateway = 5.1.0 versions...
CVE-2026-65460
CVE-2026-65460 affects the WordPress Zarinpal Gateway plugin (≤ 5.1.0). The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in versions ≤ 5.1.0. Attack context: network access required, with user interaction necessary for exploitation; impact details are not expanded b...
EUVD-2026-48213
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-61981
CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...
CVE-2026-57785
The CVE concerns the WordPress ApusListing theme (versions <= 1.2.63) with an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The available data specify the affected product (ApusListing), the vulnerable version range (