Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2026/01/24 8:26 a.m.6 views

CVE-2025-14907 Moderate Selected Posts <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update

The Moderate Selected Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing nonce verification on the mspadminpage function. This makes it possible for unauthenticated attackers to modify plugin settings via a forg...

4.3CVSS5.8AI score0.00109EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/24 8:26 a.m.5 views

CVE-2025-14907

The Moderate Selected Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing nonce verification on the mspadminpage function. This makes it possible for unauthenticated attackers to modify plugin settings via a forg...

4.3CVSS5.8AI score0.00109EPSS
SaveExploits0References3
Rows per page
Query Builder