PT-2025-47257

Name of the Vulnerable Software and Affected Versions Project Honey Pot Spam Trap plugin for WordPress versions prior to 1.0.2 Description The software is susceptible to Cross-Site Request Forgery CSRF. This is caused by a lack of proper nonce validation within the printAdminPage function. An...

CVE-2021-34633

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the /youtube-feeder.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.1...

CVE-2021-34633

Affected software: WordPress plugin YouTube Feeder (versions ≤ 2.0.1). Vulnerable component: printAdminPage function in youtube-feeder.php. Root cause: Cross-Site Request Forgery that enables an attacker to inject arbitrary web scripts. Impact: reported as CSRF leading to stored XSS; risk details...