CVE-2025-1926: Cross-Site Request Forgery (CSRF)

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.8. This is due to missing or incorrect nonce validation on the pagelayersavepost function. This makes it possible for...

CVE-2021-24633: Missing Authorization

The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the ebwriteblockcss AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users...

PT-2021-16149

Name of the Vulnerable Software and Affected Versions Countdown Block WordPress plugin versions prior to 1.1.2 Description The issue concerns a lack of authorization in the eb write block css AJAX action. This allows any authenticated user, such as a Subscriber, to modify post contents displayed ...