CVE-2025-23800 WordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in nova706 OrangeBox orangebox allows Cross Site Request Forgery.This issue affects OrangeBox: from n/a through = 3.0.0...

CVE-2025-23800

CVE-2025-23800 is a CSRF vulnerability in OrangeBox. Connected Red Hat and other sources confirm the issue affects OrangeBox versions up to 3.0.0 and describe CSRF as the core flaw. The available documents do not provide specific exploit vectors, affected workflow details, root-cause code referen...

WordPress plugin OrangeBox 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...