EUVD-2025-4032

Malicious code in bioql PyPI...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7...

CVE-2025-25101

This CVE affects the WordPress Munk Sites plugin (versions ≤ 1.0.7). The vulnerability is a Cross-Site Request Forgery (CSRF) that allows an attacker to trick an admin into installing and activating arbitrary plugins. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H with a base sco...