Browse CVEs

HIGH 7.1 CVE-2025-23654 Cross-Site Request Forgery (CSRF) vulnerability in krolow Twitter Post twitterpost allows Stored XSS.This issue affects Twitter Post: from n/a throug… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23659 Cross-Site Request Forgery (CSRF) vulnerability in hernanjh MercadoLibre Integration mercadolibre-integration allows Stored XSS.This issue affects Me… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23660 Cross-Site Request Forgery (CSRF) vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through <=… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23617 Cross-Site Request Forgery (CSRF) vulnerability in cybio Floatbox Plus floatbox-plus allows Stored XSS.This issue affects Floatbox Plus: from n/a thr… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23618 Cross-Site Request Forgery (CSRF) vulnerability in starise Twitter Shortcode twitter-shortcode allows Stored XSS.This issue affects Twitter Shortcode… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23627 Cross-Site Request Forgery (CSRF) vulnerability in frenchsquared Comment-Emailer comment-emailer allows Stored XSS.This issue affects Comment-Emailer… Mitigation only Fix from $1,9502025-01-16 MEDIUM 6.1 CVE-2025-23639 Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows Stored XSS.This issue affects MD… Mdc Youtube Downloader after 3.0.0 Fix from $1,6002025-01-16 HIGH 7.1 CVE-2025-23640 Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug rename-author-slug allows Stored XSS.This issue affects Rename Aut… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23567 Cross-Site Request Forgery (CSRF) vulnerability in Tamer Ziady GDReseller gdreseller allows Stored XSS.This issue affects GDReseller: from n/a throug… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23569 Cross-Site Request Forgery (CSRF) vulnerability in Kelvin Ng Shortcode in Comment shortcode-in-comment allows Stored XSS.This issue affects Shortcode… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23572 Cross-Site Request Forgery (CSRF) vulnerability in Dave Konopka UpDownUpDown updownupdown-postcomment-voting allows Stored XSS.This issue affects UpD… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23573 Cross-Site Request Forgery (CSRF) vulnerability in sammyb WP Background Tile wp-background-tile allows Stored XSS.This issue affects WP Background Ti… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23577 Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: fro… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23537 Cross-Site Request Forgery (CSRF) vulnerability in קידום ובניית אתרים add custom google tag manager add-custom-google-tag-manager allows Stored XSS.T… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23557 Cross-Site Request Forgery (CSRF) vulnerability in Kathleen Malone Find Your Reps find-your-reps allows Stored XSS.This issue affects Find Your Reps:… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23558 Cross-Site Request Forgery (CSRF) vulnerability in digitalfisherman Geotagged Media geotagged-media allows Stored XSS.This issue affects Geotagged Me… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23559 Cross-Site Request Forgery (CSRF) vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5. Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23560 Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: fr… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23566 Cross-Site Request Forgery (CSRF) vulnerability in syedamirhussain91 Custom Post custom-post-type-gui allows Stored XSS.This issue affects Custom Pos… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23511 Cross-Site Request Forgery (CSRF) vulnerability in Stargazer WP-BlackCheck wp-blackcheck allows Stored XSS.This issue affects WP-BlackCheck: from n/a… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23513 Cross-Site Request Forgery (CSRF) vulnerability in jd7777 Bible Embed bible-embed allows Stored XSS.This issue affects Bible Embed: from n/a through … Mitigation only Fix from $1,9502025-01-16 HIGH 8.8 CVE-2025-23530 Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issu… Mitigation only Fix from $1,9502025-01-16 HIGH 8.8 CVE-2025-23532 Cross-Site Request Forgery (CSRF) vulnerability in Regios MyAnime Widget myanime-widget allows Privilege Escalation.This issue affects MyAnime Widget… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23533 Cross-Site Request Forgery (CSRF) vulnerability in zetxek WP Lyrics wplyrics allows Stored XSS.This issue affects WP Lyrics: from n/a through <= 0.4.… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23483 Cross-Site Request Forgery (CSRF) vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affec… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23497 Cross-Site Request Forgery (CSRF) vulnerability in albdesign Simple Project Manager simple-project-managment allows Stored XSS.This issue affects Sim… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23499 Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier Board Election board-election allows Stored XSS.This issue affects Board Election: f… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23501 Cross-Site Request Forgery (CSRF) vulnerability in SpruceJoy Cookie Consent & Autoblock for GDPR/CCPA cookie-consent-autoblock allows Stored XSS.This… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23508 Cross-Site Request Forgery (CSRF) vulnerability in OrigoThemes Extra Options – Favicons extra-options-favicons allows Stored XSS.This issue affects E… Mitigation only Fix from $1,9502025-01-16 HIGH 7.1 CVE-2025-23510 Cross-Site Request Forgery (CSRF) vulnerability in Jan Štětina WordPress Logging Service wordpress-logging-service allows Stored XSS.This issue affec… Mitigation only Fix from $1,9502025-01-16