12342 matches found
CVE-2025-53327 WordPress Aioseo Multibyte Descriptions plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in ruimashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects Aioseo Multibyte Descriptions: from n/a through = 0.0.6...
CVE-2025-53322 WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize.NET Payments Using Contact Form 7 accept-authorize-net-payments-using-contact-form-7 allows Retrieve Embedded Sensitive Data.This issue affects Accept Authorize.NET Payments Using Contact Form 7: from n...
CVE-2025-53322
CVE-2025-53322 is a WordPress vulnerability in the plugin Accept Authorize.NET Payments Using Contact Form 7 . The issue stems from an insertion of sensitive information into sent data, which can allow retrieval of embedded sensitive data. Affected software: Accept Authorize.NET Payments Using Co...
CVE-2025-53315 WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload allows Stored XSS. This issue affects Relocate Upload: from n/a through 0.24.1...
CVE-2025-53311
CVE-2025-53311 is a CSRF vulnerability in the WordPress plugin Navayan Subscribe (affected: versions n/a through 1.13) that can lead to Stored XSS. The CVSS score is 7.1 (HIGH) with CVSS 3.1: Network attack vector, Low complexity, no privileges required, user interaction required, and impact to c...
CVE-2025-53309 WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form 7 accept-stripe-payments-using-contact-form-7 allows Retrieve Embedded Sensitive Data.This issue affects Accept Stripe Payments Using Contact Form 7: from n/a through = 3.0...
CVE-2025-53308
CVE-2025-53308 affects WordPress plugin Image Slider With Description (gopi_plus) up to version 9.2. The issue is CSRF that enables Stored XSS. Affected versions are listed as n/a through 9.2. Exploitation details are not provided in the documents; CVSS v3.1 base score is 7.1 (HIGH). Remediation ...
CVE-2025-53309 WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form 7 accept-stripe-payments-using-contact-form-7 allows Retrieve Embedded Sensitive Data.This issue affects Accept Stripe Payments Using Contact Form 7: from n/a through = 3.0...
CVE-2025-53301 WordPress Theme Junkie Team Content plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content allows DOM-Based XSS. This issue affects Theme Junkie Team Content: from n/a through 0.1.1...
CVE-2025-53282
CVE-2025-53282 describes a Stored XSS in the WordPress Thumbnail Editor plugin up to version 2.3.3, caused by improper input neutralization during web page generation. Affected software: Thumbnail Editor (WordPress plugin). Root cause: improper neutralization of input leading to Stored XSS. Impac...
CVE-2025-53279 WordPress Popup addon for Ninja Forms plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aman Popup addon for Ninja Forms allows DOM-Based XSS. This issue affects Popup addon for Ninja Forms: from n/a through 3.4...
CVE-2025-53277
CVE-2025-53277 : Infigo Software IS-theme-companion WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) that enables Object Injection in versions up to 1.57. Public metrics show CVSSv3.1 base score 8.8 (HIGH), with network attack vector, low attack complexity, no privileges requir...
CVE-2025-53272 WordPress Image Cleanup plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in opicron Image Cleanup image-cleanup allows Cross Site Request Forgery.This issue affects Image Cleanup: from n/a through = 1.9.2...
CVE-2025-53265 WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elena Yamshikova Virusdie allows Cross Site Request Forgery. This issue affects Virusdie: from n/a through 1.1.3...
CVE-2025-53260
CVE-2025-53260 arises from an Unrestricted Upload of File with Dangerous Type in the getredhawkstudio File Manager Plugin for WordPress. Affected Software: File Manager Plugin for WordPress versions up to and including 7.5. Impact: allows uploading a Web Shell to the web server, enabling potentia...
CVE-2025-53256 WordPress YaySMTP plugin <= 2.6.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce YaySMTP allows SQL Injection.This issue affects YaySMTP: from n/a through 2.6.5...
CVE-2025-53206
CVE-2025-53206 corresponds to a stored XSS vulnerability in the WordPress plugin HT Mega – Absolute Addons for WPBakery Page Builder . Affected: versions ≤ 1.0.8. Root cause: improper input neutralization during web page generation. Impact per reported CVSS: Network attack, Privileges Required Lo...
CVE-2025-53197 WordPress Cookiebot plugin <= 4.5.8 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in cookiebot Cookiebot cookiebot allows Cross Site Request Forgery.This issue affects Cookiebot: from n/a through = 4.5.8...
CVE-2025-24774 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce allows Reflected XSS. This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through 3.2.0...