EUVD-2026-54675

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism such as iOS universal links as if they were physically scanned, without validating the...

PT-2026-69152

Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 2026.5.0 Description The iOS Companion app fails to validate the calling application or prompt the user when tag links NFC or QR are delivered via OS-level routing mechanisms, such as iOS universal links...

EUVD-2025-4327

Malicious code in bioql PyPI...

CVE-2025-27335

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

CVE-2025-27335

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Auto Tag Links versions = 1.0.13...

CVE-2025-27335

CVE-2025-27335 is a CSRF vulnerability in the WordPress plugin “Auto Tag Links” (Free) affecting versions up to 1.0.13. The CVE entry lists CSRF as the impact; the provided metrics show a CVSSv3.1 base score of 4.3 (Medium) with network attack vector, low attack complexity, no privileges, and use...

CVE-2025-27335 WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

CVE-2025-27335 WordPress Auto Tag Links Plugin <= 1.0.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

PT-2025-7754 · Seo Roma · Auto Tag Links

Name of the Vulnerable Software and Affected Versions: Free plug in by SEO Roma Auto Tag Links versions 1.0.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that affects the Auto Tag Links plug-in, allowing unauthorized requests to be made on behalf of the...

CVE-2025-27335: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects Auto Tag Links: from n/a through = 1.0.13...

WordPress plugin Auto Tag Links 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...