CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11294 matches found

RedhatCVE•added 2025/10/04 11:53 a.m.•30 views

CVE-2025-9945

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

4.3CVSS5.2AI score0.00142EPSS

SaveExploits0References1

RedhatCVE•added 2025/10/04 11:53 a.m.•36 views

CVE-2025-9895

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

4.3CVSS5.3AI score0.00133EPSS

SaveExploits0References1

EUVD•added 2025/10/04 6:30 a.m.•30 views

EUVD-2025-32404

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS4.9AI score0.00197EPSS

SaveExploits0References4

CVE•added 2025/10/04 3:33 a.m.•51 views

CVE-2025-9886

CVE-2025-9886 : Trinity Audio – Text to Speech AI audio player for WordPress has a Cross-Site Request Forgery vulnerability up to version 5.20.2 caused by missing nonce validation in admin/inc/post-management.php. This allows unauthenticated attackers to activate/deactivate posts via forged reque...

4.3CVSS5.5AI score0.00197EPSS

SaveExploits0References3

CVE•added 2025/10/04 2:24 a.m.•44 views

CVE-2025-10746

CVE-2025-10746 – Integrate Dynamics 365 CRM plugin (WordPress) affects all versions up to 1.0.9. Root cause: missing capability checks and nonce verification on functions hooked to init, enabling unauthenticated access. Impact (per sources): unauthenticated attackers can deactivate the plugin, ta...

6.5CVSS5.8AI score0.00273EPSS

SaveExploits0References4

Cvelist•added 2025/10/04 2:24 a.m.•33 views

CVE-2025-10746 Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

6.5CVSS0.00273EPSS

SaveExploits0References4

Positive Technologies•added 2025/10/04 12:00 a.m.•25 views

PT-2025-40624

Name of the Vulnerable Software and Affected Versions Trinity Audio – Text to Speech AI audio player plugin for WordPress versions prior to 5.20.2 Description The software is susceptible to Cross-Site Request Forgery. This is because of a lack of, or incorrect, nonce validation in the...

4.3CVSS6.4AI score0.00197EPSS

SaveExploits0References8

EUVD•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-18319