CVE-2025-9893

The vulnerability CVE-2025-9893 affects the VM Menu Reorder plugin for WordPress (Product: VM Menu Reorder plugin). The issue is Cross-Site Request Forgery (CSRF) in versions up to and including 1.0.0, caused by missing or incorrect nonce validation on the vm_set_to_default function. This weaknes...

WordPress VM Menu Reorder plugin plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin VM Menu Reorder versions = 1.0.0...

PT-2025-39713

Name of the Vulnerable Software and Affected Versions VM Menu Reorder plugin for WordPress versions prior to 1.0.1 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This is because of a lack of, or incorrect, nonce validation in the vm set to default function. An...

WordPress plugin VM Menu Reorder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-11019

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11019

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11019

Total.js CMS (up to 19.9.0) has a cross-site scripting vulnerability in the Files Menu component caused by manipulation of an unknown function. The issue can be exploited remotely and an exploit has been disclosed publicly. The connected documents consistently reference Total.js CMS and the Files...

CVE-2025-11019 Total.js CMS Files Menu cross site scripting

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11019 Total.js CMS Files Menu cross site scripting

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

WordPress Groovy Menu Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Groovy Menu versions = 1.4.3...

CVE-2025-60113

Cross-Site Request Forgery CSRF vulnerability in grooni Groovy Menu groovy-menu-free allows Cross Site Request Forgery.This issue affects Groovy Menu: from n/a through = 1.4.3...

CVE-2025-60113 WordPress Groovy Menu Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in grooni Groovy Menu groovy-menu-free allows Cross Site Request Forgery.This issue affects Groovy Menu: from n/a through = 1.4.3...

CVE-2025-60113 WordPress Groovy Menu Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in grooni Groovy Menu groovy-menu-free allows Cross Site Request Forgery.This issue affects Groovy Menu: from n/a through = 1.4.3...

CVE-2025-60113

CVE-2025-60113 The provided connected document set confirms a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Groovy Menu (Free), specifically in versions up to 1.4.3. The vulnerability details and affected component align with the CVE entry, which states CSRF expos...

Total.js CMS 代码注入漏洞

Total.js CMS is a Total.js open source content management system CMS based on NoSQL database. A code injection vulnerability exists in Total.js CMS version 19.9.0 and earlier, which stems from a mishandling of an unknown function in the Files Menu component that could lead to a cross-site scripti...

PT-2025-39560

Name of the Vulnerable Software and Affected Versions grooni Groovy Menu versions through 1.4.3 Description A Cross-Site Request Forgery CSRF issue exists in grooni Groovy Menu. This allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations Upda...

WordPress plugin Groovy Menu 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-39646

Name of the Vulnerable Software and Affected Versions Total.js CMS versions up to 19.9.0 Description A flaw exists in Total.js CMS that allows for cross site scripting through manipulation of an unknown function within the Files Menu component. This issue can be exploited remotely, and details...

CVE-2025-10827

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made availab...

CVE-2025-9495

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By removing specific UI elements, an attack...