EUVD-2025-4012

Malicious code in bioql PyPI...

CVE-2025-25072

Cross-Site Request Forgery CSRF vulnerability in thunderbax WP Admin Custom Page wp-admin-custom-page allows Stored XSS.This issue affects WP Admin Custom Page: from n/a through = 1.5.0...

CVE-2025-25072

Cross-Site Request Forgery CSRF vulnerability in thunderbax WP Admin Custom Page wp-admin-custom-page allows Stored XSS.This issue affects WP Admin Custom Page: from n/a through = 1.5.0...

CVE-2025-25072

CVE-2025-25072 concerns the WP Admin Custom Page plugin (WordPress) with a CSRF to Stored XSS vulnerability affecting versions up to 1.5.0. The connected documents confirm the affected software and root cause (CSRF enabling stored XSS) but do not provide a confirmed fixed version in the supplied ...

PT-2025-5911 · WordPress · Thunderbax Wp Admin Custom Page

Name of the Vulnerable Software and Affected Versions: thunderbax WP Admin Custom Page versions 1.5.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in thunderbax WP Admin Custom Page. Recommendations: For versions 1.5.0 and earlier,...