Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1253 matches found

RedhatCVE
RedhatCVE•added 2025/12/06 5:53 a.m.•10 views

CVE-2025-13360

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS5.5AI score0.00147EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/12/06 5:01 a.m.•6 views

CVE-2025-13362

The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject...

4.3CVSS5.5AI score0.00147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/12/06 4:37 a.m.•4 views

CVE-2025-12505 weDocs <= 2.1.14 - Missing Authorization to Settings Update

The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14. This is due to the plugin not properly verifying that a user is authorized to perform an action in the createitempermissionscheck function. This makes it possible for authenticated...

5.4CVSS5.4AI score0.00218EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2025/12/06 4:37 a.m.•36 views

CVE-2025-12505 weDocs <= 2.1.14 - Missing Authorization to Settings Update

The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14. This is due to the plugin not properly verifying that a user is authorized to perform an action in the createitempermissionscheck function. This makes it possible for authenticated...

5.4CVSS0.00218EPSS
SaveExploits0References5
Patchstack
Patchstack•added 2025/12/05 11:51 p.m.•13 views

WordPress weDocs plugin <= 2.1.14 - Missing Authorization to Settings Update vulnerability

Missing Authorization to Settings Update vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin weDocs versions = 2.1.14...

5.4CVSS6.8AI score0.00218EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2025/12/05 7:26 a.m.•40 views

CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

4.3CVSS0.00154EPSS
SaveExploits0References4
NVD
NVD•added 2025/12/05 6:16 a.m.•18 views

CVE-2025-13360

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.00147EPSS
SaveExploits0References3
CVE
CVE•added 2025/12/05 5:31 a.m.•23 views

CVE-2025-12128

CVE-2025-12128 concerns the WordPress plugin “Hide Categories Or Products On Shop Page” and affects versions up to and including 1.0.7. The issue is Cross-Site Request Forgery caused by missing or incorrect nonce validation in the save_data_hcps() function. This enables unauthenticated attackers ...

4.3CVSS4.8AI score0.00122EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/12/05 5:31 a.m.•3 views

CVE-2025-12128 Hide Categories Or Products On Shop Page <= 1.0.7 - Cross-Site Request Forgery to Settings Update

The Hide Categories Or Products On Shop Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7. This is due to missing or incorrect nonce validation on the savedatahcps function. This makes it possible for unauthenticated attackers to...

4.3CVSS4.8AI score0.00122EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/12/05 5:31 a.m.•6 views

CVE-2025-13360 Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS5.1AI score0.00147EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2025/12/05 5:31 a.m.•34 views

CVE-2025-13360 Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS0.00147EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2025/12/05 5:31 a.m.•38 views

CVE-2025-13144 ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update

The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insufficient nonce validation on the addcstusettings function. This makes it possible for unauthenticated attackers to modify plugin settings v...

4.3CVSS0.00154EPSS
SaveExploits0References4
EUVD
EUVD•added 2025/12/05 4:29 a.m.•7 views

EUVD-2025-201341

The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject...

4.3CVSS5AI score0.00147EPSS
SaveExploits0References4
CVE
CVE•added 2025/12/05 4:29 a.m.•13 views

CVE-2025-13362

CVE-2025-13362 describes a CSRF vulnerability in the Norby AI WordPress plugin (versions up to and including 1.0.3) caused by missing nonce validation on the settings update function. This could allow unauthenticated attackers to trigger admin actions and inject malicious scripts via forged reque...

4.3CVSS5.1AI score0.00147EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2025/12/05 4:29 a.m.•36 views

CVE-2025-13362 Norby AI <= 1.0.3 - Cross-Site Request Forgery to Settings Update

The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject...

4.3CVSS0.00147EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2025/12/05 4:29 a.m.•2 views

CVE-2025-13362 Norby AI <= 1.0.3 - Cross-Site Request Forgery to Settings Update

The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject...

4.3CVSS5.1AI score0.00147EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2025/12/05 12:00 a.m.•9 views

PT-2025-49213

The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS5.5AI score0.00147EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2025/12/05 12:00 a.m.•9 views

PT-2025-49200

The Hide Categories Or Products On Shop Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7. This is due to missing or incorrect nonce validation on the save data hcps function. This makes it possible for unauthenticated attackers to...

4.3CVSS5.1AI score0.00122EPSS
SaveExploits0References3
Patchstack
Patchstack•added 2025/12/04 11:26 p.m.•11 views

WordPress ARK Related Posts plugin <= 2.19 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin ARK Related Posts versions = 2.19...

4.3CVSS6.8AI score0.00154EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/04 11:05 p.m.•13 views

WordPress Live CSS Preview plugin <= 2.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Live CSS Preview versions = 2.1.4...

4.3CVSS5.4AI score0.00222EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder