6 matches found
EUVD-2025-7836
Malicious code in bioql PyPI...
PT-2025-17828 · WordPress · Stesvis Wp Filter Post Category
Name of the Vulnerable Software and Affected Versions: stesvis WP Filter Post Category versions n/a through 2.1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
CVE-2025-28867
Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through = 1.0.2...
CVE-2025-28867
Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through = 1.0.2...
CVE-2025-28867
Cross-Site Request Forgery CSRF vulnerability in stesvis Frontpage category filter allows Cross Site Request Forgery. This issue affects Frontpage category filter: from n/a through 1.0.2...
CVE-2025-28867
CVE-2025-28867 is a CSRF vulnerability in the WordPress Frontpage category filter plugin, affecting versions up to 1.0.2. NVD lists CVSS v3.1 base score 8.8 (HIGH), with network attack vector, no privileges required, but user interaction is required. PatchStack notes the CSRF issue for 1.0.2. No ...