0.0

CVE-2025-62123 - WordPress WP Gmail SMTP plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7.

📅 Published: Dec. 31, 2025, 4:26 p.m. 🔄 Last Modified: April 1, 2026, 5:28 p.m.

0.0

CVE-2025-49352 - WordPress Order Cancellation & Returns for WooCommerce plugin <= 1.1.10 - Insecure Direct Object Re…

Authorization Bypass Through User-Controlled Key vulnerability in YoOhw Studio Order Cancellation & Returns for WooCommerce wc-order-cancellation-return allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Cancellation & Returns for WooCommerce: f…

📅 Published: Dec. 31, 2025, 4:25 p.m. 🔄 Last Modified: April 1, 2026, 5:25 p.m.

0.0

CVE-2025-62087 - WordPress Sticky Notes for WP Dashboard plugin <= 1.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard wb-sticky-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Notes for WP Dashboard: from n/a through <= 1.2.4.

📅 Published: Dec. 31, 2025, 4:08 p.m. 🔄 Last Modified: April 1, 2026, 5:27 p.m.

0.0

CVE-2025-63040 - WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Post Snippets post-snippets allows Cross Site Request Forgery.This issue affects Post Snippets: from n/a through <= 4.0.11.

📅 Published: Dec. 31, 2025, 4:08 p.m. 🔄 Last Modified: April 1, 2026, 5:28 p.m.

0.0

CVE-2025-49356 - WordPress Orders Chat for WooCommerce plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce orders-chat-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orders Chat for WooCommerce: from n/a through <= 1.2.0.

📅 Published: Dec. 31, 2025, 4:07 p.m. 🔄 Last Modified: April 1, 2026, 5:25 p.m.

0.0

CVE-2025-63004 - WordPress All in One Accessibility plugin <= 1.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through <= 1.15.

📅 Published: Dec. 31, 2025, 4:06 p.m. 🔄 Last Modified: April 1, 2026, 5:28 p.m.

0.0

CVE-2025-59130 - WordPress Appointify plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in appointify Appointify appointify allows Cross Site Request Forgery.This issue affects Appointify: from n/a through <= 1.0.8.

📅 Published: Dec. 31, 2025, 4:06 p.m. 🔄 Last Modified: April 1, 2026, 5:27 p.m.

0.0

CVE-2025-62130 - WordPress Accordion Slider Gallery plugin <= 2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpdiscover Accordion Slider Gallery accordion-slider-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider Gallery: from n/a through <= 2.7.

📅 Published: Dec. 31, 2025, 4:05 p.m. 🔄 Last Modified: April 1, 2026, 5:28 p.m.

0.0

CVE-2025-62131 - WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through <= 1.1.5.

📅 Published: Dec. 31, 2025, 4:04 p.m. 🔄 Last Modified: April 1, 2026, 5:28 p.m.

0.0

CVE-2025-62132 - WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability