4.3

CVSS3.1

CVE-2025-67474 - WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ForumWP: from n/a through <= 2.1.4.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

4.3

CVSS3.1

CVE-2025-67473 - WordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows Cross Site Request Forgery.This issue affects CWW Companion: from n/a through <= 1.3.2.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:30 p.m.

4.3

CVSS3.1

CVE-2025-67472 - WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site …

Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:30 p.m.

4.3

CVSS3.1

CVE-2025-67471 - WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Cross Site Request Forgery.This issue affects Quick Contact Form: from n/a through <= 8.2.5.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:30 p.m.

4.3

CVSS3.1

CVE-2025-67470 - WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

4.3

CVSS3.1

CVE-2025-67469 - WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through <= 1.4.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:30 p.m.

4.3

CVSS3.1

CVE-2025-67468 - WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Form…

Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and Contact Form 7, WPForm…

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 23, 2026, 3:35 p.m.

4.3

CVSS3.1

CVE-2025-67466 - WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:29 p.m.

4.3

CVSS3.1

CVE-2025-67465 - WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Cross Site Request Forgery.This issue affects Simple Link Directory: from n/a through <= 8.8.3.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 27, 2026, 5:29 p.m.

4.3

CVSS3.1

CVE-2025-66534 - WordPress The Aisle theme <= 2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Aisle: from n/a through <= 2.9.

πŸ“… Published: Dec. 9, 2025, 2:13 p.m. πŸ”„ Last Modified: April 23, 2026, 3:35 p.m.
Total resulsts: 349182
Page 2736 of 34,919
Β« previous page Β» next page
Filters