Lucene search
+L

5 matches found

NVD
NVD
•added 2025/12/12 4:15 a.m.•28 views

CVE-2025-14062

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the marquee deletion function. This makes it possible for unauthenticated attacke...

4.3CVSS0.00151EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/12 3:20 a.m.•20 views

EUVD-2025-202971

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the marquee deletion function. This makes it possible for unauthenticated attacke...

4.3CVSS5AI score0.00151EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/12 3:20 a.m.•27 views

CVE-2025-14062

CVE-2025-14062 – Animated Pixel Marquee Creator (WordPress) is a CSRF vulnerability in all versions up to 1.0.0 caused by missing nonce validation on the marquee deletion function. This enables unauthenticated attackers to delete marquees via forged requests if the site administrator is fooled in...

4.3CVSS5.7AI score0.00151EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/12 3:20 a.m.•11 views

CVE-2025-14062 Animated Pixel Marquee Creator <= 1.0.0 - Cross-Site Request Forgery via 'marquee' Parameter

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the marquee deletion function. This makes it possible for unauthenticated attacke...

4.3CVSS5.7AI score0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•17 views

PT-2025-50849

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the marquee deletion function. This makes it possible for unauthenticated attacke...

4.3CVSS5.5AI score0.00151EPSS
SaveExploits0References4
Rows per page
Query Builder