6 matches found
CVE-2025-46458 WordPress occupancyplan plugin <= 1.0.3.0 - CSRF to SQL Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in x000x occupancyplan occupancyplan allows SQL Injection.This issue affects occupancyplan: from n/a through = 1.0.3.0...
CVE-2025-46458
CVE-2025-46458 affects WordPress occupancyplan plugin versions up to 1.0.3.0. The vulnerability is a Cross‑Site Request Forgery (CSRF) that can lead to SQL Injection. CVSS metrics in the primary record indicate high impact to confidentiality (HIGH) and combined with network access and user intera...
PT-2025-22727 · Unknown · Occupancyplan
Name of the Vulnerable Software and Affected Versions: occupancyplan versions n/a through 1.0.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows SQL Injection in the occupancyplan. Recommendations: For versions n/a through 1.0.3.0, update to a...
CVE-2025-46450 WordPress occupancyplan plugin <= 1.0.3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in x000x occupancyplan occupancyplan allows Stored XSS.This issue affects occupancyplan: from n/a through = 1.0.3.0...
CVE-2025-46450 WordPress occupancyplan plugin <= 1.0.3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in x000x occupancyplan allows Stored XSS. This issue affects occupancyplan: from n/a through 1.0.3.0...
CVE-2025-46450
CVE-2025-46450 concerns the WordPress occupancyplan plugin. Across provided documents, the issue is described as a CSRF vulnerability that enables stored XSS, affecting occupancyplan versions up to and including 1.0.3.0. The initial description and multiple connected records consistently indicate...