EUVD-2025-18324

Malicious code in bioql PyPI...

CVE-2025-6064

The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the 'urlshortenersettings' page. This makes it possible for unauthenticated attackers to update settings and...

CVE-2025-6064

CVE-2025-6064 affects the WP URL Shortener WordPress plugin (versions ≤ 1.2). Root cause: missing/incorrect nonce validation on the url_shortener_settings page enabling CSRF. Exploitation: unauthenticated attackers could forge requests to update settings and inject scripts if a site admin is tric...

PT-2025-25481 · WordPress · Url Shortener

Name of the Vulnerable Software and Affected Versions: WP URL Shortener plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'url shortener settings' page. This allows...

CVE-2025-6064: Cross-Site Request Forgery (CSRF)

The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the 'urlshortenersettings' page. This makes it possible for unauthenticated attackers to update settings and...