Browse CVEs

HIGH 7.1 CVE-2025-31395 Cross-Site Request Forgery (CSRF) vulnerability in a.ankit Easy Custom CSS easy-custom-css allows Stored XSS.This issue affects Easy Custom CSS: from… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31399 Cross-Site Request Forgery (CSRF) vulnerability in Chandan Garg CG Scroll To Top cg-scroll-to-top allows Stored XSS.This issue affects CG Scroll To T… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31400 Cross-Site Request Forgery (CSRF) vulnerability in icyleaf WS Audio Player ws-audio-player allows Stored XSS.This issue affects WS Audio Player: from… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31385 Cross-Site Request Forgery (CSRF) vulnerability in intelcaprep Site Table of Contents site-table-of-contents allows Stored XSS.This issue affects Sit… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31388 Cross-Site Request Forgery (CSRF) vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through <= 0.4. Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31390 Cross-Site Request Forgery (CSRF) vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a throug… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31391 Cross-Site Request Forgery (CSRF) vulnerability in regen Script Compressor script-compressor allows Stored XSS.This issue affects Script Compressor: … Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31392 Cross-Site Request Forgery (CSRF) vulnerability in Shameem Reza Smart Product Gallery Slider smart-product-gallery-slider allows Cross Site Request F… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31375 Cross-Site Request Forgery (CSRF) vulnerability in bhoogterp Scheduled scheduled allows Stored XSS.This issue affects Scheduled: from n/a through <= … Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31382 Cross-Site Request Forgery (CSRF) vulnerability in theode Language Field language-field allows Stored XSS.This issue affects Language Field: from n/a… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31383 Cross-Site Request Forgery (CSRF) vulnerability in sodena FrescoChat Live Chat flexytalk-widget allows Stored XSS.This issue affects FrescoChat Live … Mitigation only Fix from $1,9502025-04-09 CRITICAL 9.8 CVE-2025-31033 Cross-Site Request Forgery (CSRF) vulnerability in Adam Nowak Buddypress Humanity buddypress-humanity allows Cross Site Request Forgery.This issue af… Mitigation only Fix from $2,3002025-04-09 HIGH 8.8 CVE-2025-31036 Cross-Site Request Forgery (CSRF) vulnerability in WPSOLR WPSolr wpsolr-free allows Privilege Escalation.This issue affects WPSolr: from n/a through … Mitigation only Fix from $1,9502025-04-09 HIGH 8.8 CVE-2025-31038 Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs essential-breadcrumbs allows Privilege Escalation.This is… Mitigation only Fix from $1,9502025-04-09 HIGH 8.8 CVE-2025-31023 Cross-Site Request Forgery (CSRF) vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Ta… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31026 Cross-Site Request Forgery (CSRF) vulnerability in Austin Comment Validation Reloaded comment-validation-reloaded allows Stored XSS.This issue affect… Mitigation only Fix from $1,9502025-04-09 HIGH 7.1 CVE-2025-31032 Cross-Site Request Forgery (CSRF) vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway pagopar-woocommerce-gateway allows Stored XSS… Mitigation only Fix from $1,9502025-04-09 MEDIUM 6.3 CVE-2024-8243 The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as wel… Wordpress\/plugin Upgrade Time Out Plugin after 1.0 Fix from $1,6002025-04-09 HIGH 8.8 CVE-2025-3064 The WPFront User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.1. This is du… Mitigation only Fix from $1,9502025-04-08 MEDIUM 6.5 CVE-2024-41795 A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-… 7kt Pac1260 Data Manager Firmware Mitigation only Fix from $1,6002025-04-08 HIGH 8.8 CVE-2024-11071 Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is dev… Mitigation only Fix from $1,9502025-04-07 HIGH 7.5 CVE-2025-0810 The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.7. This is due t… Mitigation only Fix from $1,9502025-04-05 HIGH 8.8 CVE-2025-32280 Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affe… Wp Project Manager after 2.6.22 Fix from $1,9502025-04-04 MEDIUM 5.4 CVE-2025-32249 Cross-Site Request Forgery (CSRF) vulnerability in Designinvento DirectoryPress directorypress allows Cross Site Request Forgery.This issue affects D… Mitigation only Fix from $1,6002025-04-04 MEDIUM 5.4 CVE-2025-32250 Cross-Site Request Forgery (CSRF) vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a thr… Mitigation only Fix from $1,6002025-04-04 MEDIUM 6.5 CVE-2025-32241 Cross-Site Request Forgery (CSRF) vulnerability in CleverReach® Official CleverReach Plugin for WooCommerce cleverreach-wc allows Cross Site Request … Mitigation only Fix from $1,6002025-04-04 MEDIUM 5.4 CVE-2025-32247 Cross-Site Request Forgery (CSRF) vulnerability in ABCdatos AI Content Creator ai-content-creator allows Cross Site Request Forgery.This issue affect… Mitigation only Fix from $1,6002025-04-04 MEDIUM 5.4 CVE-2025-32248 Cross-Site Request Forgery (CSRF) vulnerability in SwiftXR SwiftXR (3D/AR/VR) Viewer swiftxr-3darvr-viewer allows Cross Site Request Forgery.This iss… Mitigation only Fix from $1,6002025-04-04 HIGH 7.1 CVE-2025-32112 Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue… Mitigation only Fix from $1,9502025-04-04 HIGH 7.1 CVE-2025-32113 Cross-Site Request Forgery (CSRF) vulnerability in Renzo Tejada Libro de Reclamaciones y Quejas libro-de-reclamaciones-y-quejas allows Cross Site Req… Mitigation only Fix from $1,9502025-04-04