CVE-2025-13408

The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the foxtoollogingoogle function. This makes it...

PT-2025-50819

The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the foxtool login google function. This makes it...

PT-2024-22354

Name of the Vulnerable Software and Affected Versions Directus versions prior to 10.10.0 Description The authentication API has a redirect parameter that can be exploited as an open redirect vulnerability when a user tries to log in via the API URL. After a successful login via the Auth API GET...