Jfinal CMS CSRF

The vulnerability of the /admin/tag/save file in the Jfinal CMS system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

WordPress Simple Auto Tag plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Simple Auto Tag versions = 1.1...

CVE-2025-22260

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2025-22260 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2025-22260

CVE-2025-22260: Missing Authorization in WordPress Meta Tag Manager plugin (Pixelite) affects versions n/a through 3.1. CVSS v3.1 base score 4.3 (Medium); impact is limited to Missing Authorization. Connected sources confirm the vulnerability name, affected version range, and that it stems from B...

CVE-2025-22260 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag Manager: from n/a through 3.1...

PT-2025-4399 · Unknown · Pixelite Meta Tag Manager

Name of the Vulnerable Software and Affected Versions: Pixelite Meta Tag Manager versions n/a through 3.1 Description: The issue is related to a Missing Authorization vulnerability in the Meta Tag Manager. This vulnerability affects the Meta Tag Manager from version n/a through 3.1...

WordPress plugin Meta Tag Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-5602 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.12 Description: A SQL Injection vulnerability was discovered in the WeGIA application, "salvar tag.php" endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing...

CVE-2025-22260: Missing Authorization

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Meta Tag Manager versions = 3.1...

CVE-2024-13732

The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sectiontag’ parameter in all versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-13732 Responsive Blocks – WordPress Gutenberg Blocks <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via section_tag Parameter

The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sectiontag’ parameter in all versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress Responsive Blocks plugin <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via section_tag Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via sectiontag Parameter vulnerability discovered by zaim in WordPress Plugin Responsive Blocks versions = 1.9.9...

PT-2025-2260 · WordPress · Responsive Blocks

Name of the Vulnerable Software and Affected Versions: Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress versions up to, and including, 1.9.9 Description: The issue is related to Stored Cross-Site Scripting via the section tag parameter due to insufficient input sanitization and...

DRUPAL-CONTRIB-2025-012

This module enables you to integrate the site with the Google Tag Manager GTM application. The module doesn't sufficiently validate the enabling or disabling of a tag container. The routes involved are not protected against Cross Site Request Forgery CSRF. This vulnerability is mitigated by the...

DRUPAL-CONTRIB-2025-011

This module enables you to integrate the site with the Google Tag Manager GTM application. The module doesn't have the "restrict access" flag on the "administer google\tag\container" permission. A user with this permission can load a GTM container that completely changes the page or inserts...

DRUPAL-CONTRIB-2025-008

This module enables you to add the Matomo web statistics tracking system to your website. The Matomo Analytics Tag Manager sub-module allows you to add one or more Matomo tag containers on your website. The module does not protect against Cross Site Request Forgeries on routes to enable or disabl...

Drupal Google Tag module < 1.8.0,2.0.0-2.0.7 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff in WordPress Module Google Tag versions 1.8.0,2.0.0-2.0.7...

Drupal Google Tag module < 1.8.0,2.0.0-2.0.7 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Pierre Rudloff in WordPress Module Google Tag versions 1.8.0,2.0.0-2.0.7...