Instruction: Please provide detailed information about CVE-2025-31004

CVE:CVE-2025-31004
Description:Missing Authorization vulnerability in Croover.inc Rich Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rich Table of Contents: from n/a through 1.4.0.
published:2025-04-09T17:15:33.027


Instruction: Please provide detailed information about CVE-2025-31005

CVE:CVE-2025-31005
Description:Cross-Site Request Forgery (CSRF) vulnerability in Uzair Easyfonts allows Cross Site Request Forgery. This issue affects Easyfonts: from n/a through 1.1.2.
published:2025-04-09T17:15:33.233


Instruction: Please provide detailed information about CVE-2025-31008

CVE:CVE-2025-31008
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YouTube Embed Plugin Support YouTube Embed allows Stored XSS. This issue affects YouTube Embed: from n/a through 5.3.1.
published:2025-04-09T17:15:33.440


Instruction: Please provide detailed information about CVE-2025-31009

CVE:CVE-2025-31009
Description:Server-Side Request Forgery (SSRF) vulnerability in Jan Boddez IndieBlocks allows Server Side Request Forgery. This issue affects IndieBlocks: from n/a through 0.13.1.
published:2025-04-09T17:15:33.637


Instruction: Please provide detailed information about CVE-2025-31012

CVE:CVE-2025-31012
Description:Missing Authorization vulnerability in Phil Age Gate allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Age Gate: from n/a through 3.5.4.
published:2025-04-09T17:15:33.830


Instruction: Please provide detailed information about CVE-2025-31017

CVE:CVE-2025-31017
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Noakes Nav Menu Manager allows Stored XSS. This issue affects Nav Menu Manager: from n/a through 3.2.5.
published:2025-04-09T17:15:34.047


Instruction: Please provide detailed information about CVE-2025-31020

CVE:CVE-2025-31020
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webliberty Simple Spoiler allows Stored XSS. This issue affects Simple Spoiler: from n/a through 1.4.
published:2025-04-09T17:15:34.273


Instruction: Please provide detailed information about CVE-2025-31023

CVE:CVE-2025-31023
Description:Cross-Site Request Forgery (CSRF) vulnerability in Purab Seo Meta Tags allows Cross Site Request Forgery. This issue affects Seo Meta Tags: from n/a through 1.4.
published:2025-04-09T17:15:34.490


Instruction: Please provide detailed information about CVE-2025-31026

CVE:CVE-2025-31026
Description:Cross-Site Request Forgery (CSRF) vulnerability in Austin Comment Validation Reloaded allows Stored XSS. This issue affects Comment Validation Reloaded: from n/a through 0.5.
published:2025-04-09T17:15:34.693


Instruction: Please provide detailed information about CVE-2025-31032

CVE:CVE-2025-31032
Description:Cross-Site Request Forgery (CSRF) vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway allows Stored XSS. This issue affects Pagopar – WooCommerce Gateway: from n/a through 2.7.1.
published:2025-04-09T17:15:34.900


Instruction: Please provide detailed information about CVE-2025-31033

CVE:CVE-2025-31033
Description:Cross-Site Request Forgery (CSRF) vulnerability in Adam Nowak Buddypress Humanity allows Cross Site Request Forgery. This issue affects Buddypress Humanity: from n/a through 1.2.
published:2025-04-09T17:15:35.083


Instruction: Please provide detailed information about CVE-2025-31034

CVE:CVE-2025-31034
Description:Cross-Site Request Forgery (CSRF) vulnerability in AboZain Albanna Customize Login Page allows Cross Site Request Forgery. This issue affects Customize Login Page: from n/a through 1.1.
published:2025-04-09T17:15:35.283


Instruction: Please provide detailed information about CVE-2025-31035

CVE:CVE-2025-31035
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Chris WP Editor.md – The Perfect WordPress Markdown Editor allows Stored XSS. This issue affects WP Editor.md – The Perfect WordPress Markdown Editor: from n/a through 10.2.1.
published:2025-04-09T17:15:35.470


Instruction: Please provide detailed information about CVE-2025-31036

CVE:CVE-2025-31036
Description:Cross-Site Request Forgery (CSRF) vulnerability in WPSolr free WPSolr allows Privilege Escalation. This issue affects WPSolr: from n/a through 24.0.
published:2025-04-09T17:15:35.660


Instruction: Please provide detailed information about CVE-2025-31038

CVE:CVE-2025-31038
Description:Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs allows Privilege Escalation. This issue affects Essential Breadcrumbs: from n/a through 1.1.1.
published:2025-04-09T17:15:35.840


Instruction: Please provide detailed information about CVE-2025-31042

CVE:CVE-2025-31042
Description:Missing Authorization vulnerability in rtakao Sandwich Adsense allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sandwich Adsense: from n/a through 4.0.2.
published:2025-04-09T17:15:36.027


Instruction: Please provide detailed information about CVE-2025-31375

CVE:CVE-2025-31375
Description:Cross-Site Request Forgery (CSRF) vulnerability in bhoogterp Scheduled allows Stored XSS. This issue affects Scheduled: from n/a through 1.0.
published:2025-04-09T17:15:36.227


Instruction: Please provide detailed information about CVE-2025-31377

CVE:CVE-2025-31377
Description:Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woo Product Feed For Marketing Channels: from n/a through 1.9.0.
published:2025-04-09T17:15:36.540


Instruction: Please provide detailed information about CVE-2025-31382

CVE:CVE-2025-31382
Description:Cross-Site Request Forgery (CSRF) vulnerability in theode Language Field allows Stored XSS. This issue affects Language Field: from n/a through 0.9.
published:2025-04-09T17:15:36.743


Instruction: Please provide detailed information about CVE-2025-31383

CVE:CVE-2025-31383
Description:Cross-Site Request Forgery (CSRF) vulnerability in  FrescoChat Live Chat allows Stored XSS. This issue affects FrescoChat Live Chat: from n/a through 3.2.6.
published:2025-04-09T17:15:36.940


Instruction: Please provide detailed information about CVE-2025-31385

CVE:CVE-2025-31385
Description:Cross-Site Request Forgery (CSRF) vulnerability in  Site Table of Contents allows Stored XSS. This issue affects Site Table of Contents: from n/a through 0.3.
published:2025-04-09T17:15:37.127


Instruction: Please provide detailed information about CVE-2025-31388

CVE:CVE-2025-31388
Description:Cross-Site Request Forgery (CSRF) vulnerability in doa The World allows Stored XSS. This issue affects The World: from n/a through 0.4.
published:2025-04-09T17:15:37.363


Instruction: Please provide detailed information about CVE-2025-31390

CVE:CVE-2025-31390
Description:Cross-Site Request Forgery (CSRF) vulnerability in bdoga Social Crowd allows Stored XSS. This issue affects Social Crowd: from n/a through 0.9.6.1.
published:2025-04-09T17:15:37.543


Instruction: Please provide detailed information about CVE-2025-31391

CVE:CVE-2025-31391
Description:Cross-Site Request Forgery (CSRF) vulnerability in regen Script Compressor allows Stored XSS. This issue affects Script Compressor: from n/a through 1.7.1.
published:2025-04-09T17:15:37.743


Instruction: Please provide detailed information about CVE-2025-31392

CVE:CVE-2025-31392
Description:Cross-Site Request Forgery (CSRF) vulnerability in Shameem Reza Smart Product Gallery Slider allows Cross Site Request Forgery. This issue affects Smart Product Gallery Slider: from n/a through 1.0.4.
published:2025-04-09T17:15:37.943


Instruction: Please provide detailed information about CVE-2025-31393

CVE:CVE-2025-31393
Description:Cross-Site Request Forgery (CSRF) vulnerability in vfvalent Social Bookmarking RELOADED allows Stored XSS. This issue affects Social Bookmarking RELOADED: from n/a through 3.18.
published:2025-04-09T17:15:38.130


Instruction: Please provide detailed information about CVE-2025-31394

CVE:CVE-2025-31394
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kailey (trepmal) More Mime Type Filters allows Stored XSS. This issue affects More Mime Type Filters: from n/a through 0.3.
published:2025-04-09T17:15:38.303


Instruction: Please provide detailed information about CVE-2025-31395

CVE:CVE-2025-31395
Description:Cross-Site Request Forgery (CSRF) vulnerability in a.ankit Easy Custom CSS allows Stored XSS. This issue affects Easy Custom CSS: from n/a through 1.0.
published:2025-04-09T17:15:38.500


Instruction: Please provide detailed information about CVE-2025-31399

CVE:CVE-2025-31399
Description:Cross-Site Request Forgery (CSRF) vulnerability in Chandan Garg CG Scroll To Top allows Stored XSS. This issue affects CG Scroll To Top: from n/a through 3.5.
published:2025-04-09T17:15:38.683


Instruction: Please provide detailed information about CVE-2025-31400

CVE:CVE-2025-31400
Description:Cross-Site Request Forgery (CSRF) vulnerability in icyleaf WS Audio Player allows Stored XSS. This issue affects WS Audio Player: from n/a through 1.1.8.
published:2025-04-09T17:15:38.867


Instruction: Please provide detailed information about CVE-2025-31401

CVE:CVE-2025-31401
Description:Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas allows Stored XSS. This issue affects MMX – Make Me Christmas: from n/a through 1.0.0.
published:2025-04-09T17:15:39.050


Instruction: Please provide detailed information about CVE-2025-31402

CVE:CVE-2025-31402
Description:Cross-Site Request Forgery (CSRF) vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller allows Stored XSS. This issue affects NewsBoard Post and RSS Scroller: from n/a through 1.2.12.
published:2025-04-09T17:15:39.243


Instruction: Please provide detailed information about CVE-2025-31404

CVE:CVE-2025-31404
Description:Cross-Site Request Forgery (CSRF) vulnerability in Wladyslaw Madejczyk AF Tell a Friend allows Stored XSS. This issue affects AF Tell a Friend: from n/a through 1.4.
published:2025-04-09T17:15:39.423


Instruction: Please provide detailed information about CVE-2025-32476

CVE:CVE-2025-32476
Description:Cross-Site Request Forgery (CSRF) vulnerability in blueinstyle Advanced Tag Lists allows Stored XSS. This issue affects Advanced Tag Lists: from n/a through 1.2.
published:2025-04-09T17:15:39.607


Instruction: Please provide detailed information about CVE-2025-32477

CVE:CVE-2025-32477
Description:Cross-Site Request Forgery (CSRF) vulnerability in Jordi Salord WP-Easy Menu allows Stored XSS. This issue affects WP-Easy Menu: from n/a through 0.41.
published:2025-04-09T17:15:39.813


Instruction: Please provide detailed information about CVE-2025-32478

CVE:CVE-2025-32478
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mario Aguiar WP SexyLightBox allows Stored XSS. This issue affects WP SexyLightBox: from n/a through 0.5.3.
published:2025-04-09T17:15:40.037


Instruction: Please provide detailed information about CVE-2025-32479

CVE:CVE-2025-32479
Description:Cross-Site Request Forgery (CSRF) vulnerability in ab-tools Flags Widget allows Stored XSS. This issue affects Flags Widget: from n/a through 1.0.7.
published:2025-04-09T17:15:40.240


Instruction: Please provide detailed information about CVE-2025-32480

CVE:CVE-2025-32480
Description:Cross-Site Request Forgery (CSRF) vulnerability in dalziel Windows Live Writer allows Stored XSS. This issue affects Windows Live Writer: from n/a through 0.1.
published:2025-04-09T17:15:40.433


Instruction: Please provide detailed information about CVE-2025-32481

CVE:CVE-2025-32481
Description:Cross-Site Request Forgery (CSRF) vulnerability in ninotheme Nino Social Connect allows Stored XSS. This issue affects Nino Social Connect: from n/a through 2.0.
published:2025-04-09T17:15:40.617


Instruction: Please provide detailed information about CVE-2025-32482

CVE:CVE-2025-32482
Description:Cross-Site Request Forgery (CSRF) vulnerability in quanganhdo Custom Smilies allows Stored XSS. This issue affects Custom Smilies: from n/a through 1.2.
published:2025-04-09T17:15:40.807


Instruction: Please provide detailed information about CVE-2025-32483

CVE:CVE-2025-32483
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Salisbury Request Call Back allows Stored XSS. This issue affects Request Call Back: from n/a through 1.4.1.
published:2025-04-09T17:15:41.000


Instruction: Please provide detailed information about CVE-2025-32484

CVE:CVE-2025-32484
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WP-Planification allows Stored XSS. This issue affects WP-Planification: from n/a through 2.3.1.
published:2025-04-09T17:15:41.183


Instruction: Please provide detailed information about CVE-2025-32485

CVE:CVE-2025-32485
Description:Cross-Site Request Forgery (CSRF) vulnerability in Bjoern WP Performance Pack allows Cross Site Request Forgery. This issue affects WP Performance Pack: from n/a through 2.5.4.
published:2025-04-09T17:15:41.370


Instruction: Please provide detailed information about CVE-2025-32487

CVE:CVE-2025-32487
Description:Server-Side Request Forgery (SSRF) vulnerability in Joe Waymark allows Server Side Request Forgery. This issue affects Waymark: from n/a through 1.5.2.
published:2025-04-09T17:15:41.550


Instruction: Please provide detailed information about CVE-2025-32488

CVE:CVE-2025-32488
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in آریا وردپرس Aria Font allows Stored XSS. This issue affects Aria Font: from n/a through 1.4.
published:2025-04-09T17:15:41.737


Instruction: Please provide detailed information about CVE-2025-32489

CVE:CVE-2025-32489
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Wetterwarner allows Stored XSS. This issue affects Wetterwarner: from n/a through 2.7.2.
published:2025-04-09T17:15:41.920


Instruction: Please provide detailed information about CVE-2025-32492

CVE:CVE-2025-32492
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliot Akira Admin Menu Post List allows Stored XSS. This issue affects Admin Menu Post List: from n/a through 2.0.7.
published:2025-04-09T17:15:42.100


Instruction: Please provide detailed information about CVE-2025-32493

CVE:CVE-2025-32493
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect allows Stored XSS. This issue affects BP Social Connect: from n/a through 1.6.2.
published:2025-04-09T17:15:42.303


Instruction: Please provide detailed information about CVE-2025-32494

CVE:CVE-2025-32494
Description:Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack allows Cross Site Request Forgery. This issue affects reCAPTCHA Jetpack: from n/a through 0.2.2.
published:2025-04-09T17:15:42.500


Instruction: Please provide detailed information about CVE-2025-32495

CVE:CVE-2025-32495
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark allows Stored XSS. This issue affects Waymark: from n/a through 1.5.2.
published:2025-04-09T17:15:42.667


Instruction: Please provide detailed information about CVE-2025-32496

CVE:CVE-2025-32496
Description:Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer allows Upload a Web Shell to a Web Server. This issue affects Ultra Demo Importer: from n/a through 1.0.5.
published:2025-04-09T17:15:42.850


Instruction: Please provide detailed information about CVE-2025-32497

CVE:CVE-2025-32497
Description:Cross-Site Request Forgery (CSRF) vulnerability in squiter Spoiler Block allows Stored XSS. This issue affects Spoiler Block: from n/a through 1.7.
published:2025-04-09T17:15:43.070


Instruction: Please provide detailed information about CVE-2025-32498

CVE:CVE-2025-32498
Description:Cross-Site Request Forgery (CSRF) vulnerability in oleglark VKontakte Cross-Post allows Stored XSS. This issue affects VKontakte Cross-Post: from n/a through 0.3.2.
published:2025-04-09T17:15:43.263


Instruction: Please provide detailed information about CVE-2025-32499

CVE:CVE-2025-32499
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Logo Showcase Ultimate allows PHP Local File Inclusion. This issue affects Logo Showcase Ultimate: from n/a through 1.4.4.
published:2025-04-09T17:15:43.440


Instruction: Please provide detailed information about CVE-2025-32500

CVE:CVE-2025-32500
Description:Cross-Site Request Forgery (CSRF) vulnerability in Sudavar Codescar Radio Widget allows Stored XSS. This issue affects Codescar Radio Widget: from n/a through 0.4.2.
published:2025-04-09T17:15:43.630


Instruction: Please provide detailed information about CVE-2025-32501

CVE:CVE-2025-32501
Description:Cross-Site Request Forgery (CSRF) vulnerability in dimafreund RentSyst allows Stored XSS. This issue affects RentSyst: from n/a through 2.0.72.
published:2025-04-09T17:15:43.820


Instruction: Please provide detailed information about CVE-2025-32502

CVE:CVE-2025-32502
Description:Cross-Site Request Forgery (CSRF) vulnerability in lemmentwickler ePaper Lister for Yumpu allows Stored XSS. This issue affects ePaper Lister for Yumpu: from n/a through 1.4.0.
published:2025-04-09T17:15:44.010


Instruction: Please provide detailed information about CVE-2025-32503

CVE:CVE-2025-32503
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Conti Link Shield allows Stored XSS. This issue affects Link Shield: from n/a through 0.5.4.
published:2025-04-09T17:15:44.187


Instruction: Please provide detailed information about CVE-2025-32505

CVE:CVE-2025-32505
Description:Cross-Site Request Forgery (CSRF) vulnerability in SCAND MultiMailer allows Stored XSS. This issue affects MultiMailer: from n/a through 1.0.3.
published:2025-04-09T17:15:44.383


Instruction: Please provide detailed information about CVE-2025-32518

CVE:CVE-2025-32518
Description:Cross-Site Request Forgery (CSRF) vulnerability in hossainawlad ALD Login Page allows Stored XSS. This issue affects ALD Login Page: from n/a through 1.1.
published:2025-04-09T17:15:44.557


Instruction: Please provide detailed information about CVE-2025-32543

CVE:CVE-2025-32543
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hivedigital Canonical Attachments allows Reflected XSS. This issue affects Canonical Attachments: from n/a through 1.7.
published:2025-04-09T17:15:44.733


Instruction: Please provide detailed information about CVE-2025-32547

CVE:CVE-2025-32547
Description:Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP allows Blind SQL Injection. This issue affects All push notification for WP: from n/a through 1.5.3.
published:2025-04-09T17:15:44.930


Instruction: Please provide detailed information about CVE-2025-32550

CVE:CVE-2025-32550
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection. This issue affects Click & Pledge Connect Plugin: from 2.24080000 through WP6.6.1.
published:2025-04-09T17:15:45.120


Instruction: Please provide detailed information about CVE-2025-32555

CVE:CVE-2025-32555
Description:Cross-Site Request Forgery (CSRF) vulnerability in Edamam SEO, Nutrition and Print for Recipes by Edamam allows Stored XSS. This issue affects SEO, Nutrition and Print for Recipes by Edamam: from n/a through 3.3.
published:2025-04-09T17:15:45.317


Instruction: Please provide detailed information about CVE-2025-32556

CVE:CVE-2025-32556
Description:Cross-Site Request Forgery (CSRF) vulnerability in Sandor Kovacs Simple Post Meta Manager allows Reflected XSS. This issue affects Simple Post Meta Manager: from n/a through 1.0.9.
published:2025-04-09T17:15:45.593


Instruction: Please provide detailed information about CVE-2025-32559

CVE:CVE-2025-32559
Description:Cross-Site Request Forgery (CSRF) vulnerability in REVE Chat REVE Chat allows Stored XSS. This issue affects REVE Chat: from n/a through 6.2.2.
published:2025-04-09T17:15:45.827


Instruction: Please provide detailed information about CVE-2025-32563

CVE:CVE-2025-32563
Description:Cross-Site Request Forgery (CSRF) vulnerability in dangrossman WP Calais Auto Tagger allows Cross Site Request Forgery. This issue affects WP Calais Auto Tagger: from n/a through 2.0.
published:2025-04-09T17:15:46.030


Instruction: Please provide detailed information about CVE-2025-32570

CVE:CVE-2025-32570
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ChillPay ChillPay WooCommerce allows Stored XSS. This issue affects ChillPay WooCommerce: from n/a through 2.5.3.
published:2025-04-09T17:15:46.237


Instruction: Please provide detailed information about CVE-2025-32575

CVE:CVE-2025-32575
Description:Cross-Site Request Forgery (CSRF) vulnerability in axew3 WP w3all phpBB allows Reflected XSS. This issue affects WP w3all phpBB: from n/a through 2.9.2.
published:2025-04-09T17:15:46.423


Instruction: Please provide detailed information about CVE-2025-32576

CVE:CVE-2025-32576
Description:Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop allows Upload a Web Shell to a Web Server. This issue affects WP shop: from n/a through 2.6.0.
published:2025-04-09T17:15:46.643


Instruction: Please provide detailed information about CVE-2025-32580

CVE:CVE-2025-32580
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in debounce DeBounce Email Validator allows Stored XSS. This issue affects DeBounce Email Validator: from n/a through 5.7.1.
published:2025-04-09T17:15:46.860


Instruction: Please provide detailed information about CVE-2025-32581

CVE:CVE-2025-32581
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ankit Singla WordPress Spam Blocker allows Stored XSS. This issue affects WordPress Spam Blocker: from n/a through 2.0.4.
published:2025-04-09T17:15:47.073


Instruction: Please provide detailed information about CVE-2025-32584

CVE:CVE-2025-32584
Description:Cross-Site Request Forgery (CSRF) vulnerability in Chat2 Chat2 allows Cross Site Request Forgery. This issue affects Chat2: from n/a through 3.6.3.
published:2025-04-09T17:15:47.270


Instruction: Please provide detailed information about CVE-2025-32591

CVE:CVE-2025-32591
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts allows Cross Site Request Forgery. This issue affects WP Abstracts: from n/a through 2.7.4.
published:2025-04-09T17:15:47.510


Instruction: Please provide detailed information about CVE-2025-32597

CVE:CVE-2025-32597
Description:Cross-Site Request Forgery (CSRF) vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily allows Cross-Site Scripting (XSS). This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through 1.4.8.
published:2025-04-09T17:15:47.690


Instruction: Please provide detailed information about CVE-2025-32610

CVE:CVE-2025-32610
Description:Cross-Site Request Forgery (CSRF) vulnerability in Foliovision: Making the web work for you Foliopress WYSIWYG allows Cross Site Request Forgery. This issue affects Foliopress WYSIWYG: from n/a through 2.6.18.
published:2025-04-09T17:15:47.883


Instruction: Please provide detailed information about CVE-2025-32612

CVE:CVE-2025-32612
Description:Cross-Site Request Forgery (CSRF) vulnerability in rafasashi User Session Synchronizer allows Stored XSS. This issue affects User Session Synchronizer: from n/a through 1.4.0.
published:2025-04-09T17:15:48.070


Instruction: Please provide detailed information about CVE-2025-32616

CVE:CVE-2025-32616
Description:Cross-Site Request Forgery (CSRF) vulnerability in nimbata Nimbata Call Tracking allows Stored XSS. This issue affects Nimbata Call Tracking: from n/a through 1.7.1.
published:2025-04-09T17:15:48.263


Instruction: Please provide detailed information about CVE-2025-32617

CVE:CVE-2025-32617
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ydesignservices Multiple Location Google Map allows Stored XSS. This issue affects Multiple Location Google Map: from n/a through 1.1.
published:2025-04-09T17:15:48.447


Instruction: Please provide detailed information about CVE-2025-32619

CVE:CVE-2025-32619
Description:Cross-Site Request Forgery (CSRF) vulnerability in KeyCAPTCHA KeyCAPTCHA allows Stored XSS. This issue affects KeyCAPTCHA: from n/a through 2.5.1.
published:2025-04-09T17:15:48.630


Instruction: Please provide detailed information about CVE-2025-32621

CVE:CVE-2025-32621
Description:Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital WP Map Route Planner allows Cross Site Request Forgery. This issue affects WP Map Route Planner: from n/a through 1.0.0.
published:2025-04-09T17:15:48.813


Instruction: Please provide detailed information about CVE-2025-32623

CVE:CVE-2025-32623
Description:Cross-Site Request Forgery (CSRF) vulnerability in plainware PlainInventory allows Stored XSS. This issue affects PlainInventory: from n/a through 3.1.9.
published:2025-04-09T17:15:49.000


Instruction: Please provide detailed information about CVE-2025-32624

CVE:CVE-2025-32624
Description:Missing Authorization vulnerability in czater Czater.pl – live chat i telefon allows Cross Site Request Forgery. This issue affects Czater.pl – live chat i telefon: from n/a through 1.0.5.
published:2025-04-09T17:15:49.170


Instruction: Please provide detailed information about CVE-2025-32640

CVE:CVE-2025-32640
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor One Click Accessibility allows Stored XSS. This issue affects One Click Accessibility: from n/a through 3.1.0.
published:2025-04-09T17:15:49.360


Instruction: Please provide detailed information about CVE-2025-32641

CVE:CVE-2025-32641
Description:Cross-Site Request Forgery (CSRF) vulnerability in anantaddons Anant Addons for Elementor allows Cross Site Request Forgery. This issue affects Anant Addons for Elementor: from n/a through 1.1.5.
published:2025-04-09T17:15:49.540


Instruction: Please provide detailed information about CVE-2025-32642

CVE:CVE-2025-32642
Description:Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon allows Remote Code Inclusion. This issue affects Vite Coupon: from n/a through 1.0.7.
published:2025-04-09T17:15:49.727


Instruction: Please provide detailed information about CVE-2025-32644

CVE:CVE-2025-32644
Description:Cross-Site Request Forgery (CSRF) vulnerability in ip2location IP2Location World Clock allows Stored XSS. This issue affects IP2Location World Clock: from n/a through 1.1.9.
published:2025-04-09T17:15:49.917


Instruction: Please provide detailed information about CVE-2025-32645

CVE:CVE-2025-32645
Description:Cross-Site Request Forgery (CSRF) vulnerability in Hiren Patel Custom Posts Order allows Stored XSS. This issue affects Custom Posts Order: from n/a through 4.4.
published:2025-04-09T17:15:50.120


Instruction: Please provide detailed information about CVE-2025-32659

CVE:CVE-2025-32659
Description:Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro for WooCommerce allows Stored XSS. This issue affects FraudLabs Pro for WooCommerce: from n/a through 2.22.7.
published:2025-04-09T17:15:50.317


Instruction: Please provide detailed information about CVE-2025-32661

CVE:CVE-2025-32661
Description:Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Interactive US Map allows Stored XSS. This issue affects Interactive US Map: from n/a through 2.7.
published:2025-04-09T17:15:50.493


Instruction: Please provide detailed information about CVE-2025-32664

CVE:CVE-2025-32664
Description:Cross-Site Request Forgery (CSRF) vulnerability in ashokbasnet Nepali Date Utilities allows Stored XSS. This issue affects Nepali Date Utilities: from n/a through 1.0.13.
published:2025-04-09T17:15:50.660


Instruction: Please provide detailed information about CVE-2025-32667

CVE:CVE-2025-32667
Description:Cross-Site Request Forgery (CSRF) vulnerability in fromdoppler Doppler Forms allows Stored XSS. This issue affects Doppler Forms: from n/a through 2.4.5.
published:2025-04-09T17:15:50.843


Instruction: Please provide detailed information about CVE-2025-32669

CVE:CVE-2025-32669
Description:Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack allows Stored XSS. This issue affects Mergado Pack: from n/a through 4.1.1.
published:2025-04-09T17:15:51.023


Instruction: Please provide detailed information about CVE-2025-32673

CVE:CVE-2025-32673
Description:Cross-Site Request Forgery (CSRF) vulnerability in epeken Epeken All Kurir allows Stored XSS. This issue affects Epeken All Kurir: from n/a through 1.4.6.2.
published:2025-04-09T17:15:51.200


Instruction: Please provide detailed information about CVE-2025-32675

CVE:CVE-2025-32675
Description:Server-Side Request Forgery (SSRF) vulnerability in QuantumCloud SEO Help allows Server Side Request Forgery. This issue affects SEO Help: from n/a through 6.6.0.
published:2025-04-09T17:15:51.383


Instruction: Please provide detailed information about CVE-2025-32676

CVE:CVE-2025-32676
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect allows Blind SQL Injection. This issue affects Verowa Connect: from n/a through 3.0.5.
published:2025-04-09T17:15:51.560


Instruction: Please provide detailed information about CVE-2025-32677

CVE:CVE-2025-32677
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solwininfotech WP Social Stream Designer allows Blind SQL Injection. This issue affects WP Social Stream Designer: from n/a through 1.3.
published:2025-04-09T17:15:51.730


Instruction: Please provide detailed information about CVE-2025-32678

CVE:CVE-2025-32678
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Show Stats allows Cross Site Request Forgery. This issue affects WP Show Stats: from n/a through 1.5.
published:2025-04-09T17:15:51.913


Instruction: Please provide detailed information about CVE-2025-32679

CVE:CVE-2025-32679
Description:Cross-Site Request Forgery (CSRF) vulnerability in ZealousWeb User Registration Using Contact Form 7 allows Cross Site Request Forgery. This issue affects User Registration Using Contact Form 7: from n/a through 2.2.
published:2025-04-09T17:15:52.090


Instruction: Please provide detailed information about CVE-2025-32680

CVE:CVE-2025-32680
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Grade Us, Inc. Review Stream allows Stored XSS. This issue affects Review Stream: from n/a through 1.6.7.
published:2025-04-09T17:15:52.283


Instruction: Please provide detailed information about CVE-2025-32683

CVE:CVE-2025-32683
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG Lite allows DOM-Based XSS. This issue affects MapSVG Lite: from n/a through 8.5.32.
published:2025-04-09T17:15:52.467


Instruction: Please provide detailed information about CVE-2025-32684

CVE:CVE-2025-32684
Description:Missing Authorization vulnerability in RomanCode MapSVG Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MapSVG Lite: from n/a through 8.5.32.
published:2025-04-09T17:15:52.640


Instruction: Please provide detailed information about CVE-2025-32685

CVE:CVE-2025-32685
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aristo Rinjuang WP Inquiries allows SQL Injection. This issue affects WP Inquiries: from n/a through 0.2.1.
published:2025-04-09T17:15:52.817


Instruction: Please provide detailed information about CVE-2025-32690

CVE:CVE-2025-32690
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Angelo Mandato PowerPress Podcasting allows DOM-Based XSS. This issue affects PowerPress Podcasting: from n/a through 11.12.4.
published:2025-04-09T17:15:53.010


Instruction: Please provide detailed information about CVE-2025-32691

CVE:CVE-2025-32691
Description:Server-Side Request Forgery (SSRF) vulnerability in Angelo Mandato PowerPress Podcasting allows Server Side Request Forgery. This issue affects PowerPress Podcasting: from n/a through 11.12.4.
published:2025-04-09T17:15:53.190


Instruction: Please provide detailed information about CVE-2025-32692

CVE:CVE-2025-32692
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms allows PHP Local File Inclusion. This issue affects WP Subscription Forms: from n/a through 1.2.4.
published:2025-04-09T17:15:53.370


Instruction: Please provide detailed information about CVE-2025-32693

CVE:CVE-2025-32693
Description:URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress allows Phishing. This issue affects WebinarPress: from n/a through 1.33.27.
published:2025-04-09T17:15:53.540


Instruction: Please provide detailed information about CVE-2025-32694

CVE:CVE-2025-32694
Description:URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Rustaurius Ultimate WP Mail allows Phishing. This issue affects Ultimate WP Mail: from n/a through 1.3.2.
published:2025-04-09T17:15:53.700


Instruction: Please provide detailed information about CVE-2025-32695

CVE:CVE-2025-32695
Description:Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation. This issue affects Checkout Mestres WP: from n/a through 8.7.5.
published:2025-04-09T17:15:53.877


Instruction: Please provide detailed information about CVE-2025-3114

CVE:CVE-2025-3114
Description:Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise.  Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
published:2025-04-09T18:15:50.643


Instruction: Please provide detailed information about CVE-2025-3115

CVE:CVE-2025-3115
Description:Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution
published:2025-04-09T18:15:50.813


Instruction: Please provide detailed information about CVE-2025-3131

CVE:CVE-2025-3131
Description:Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2.*.
published:2025-04-09T18:15:50.950


Instruction: Please provide detailed information about CVE-2025-3474

CVE:CVE-2025-3474
Description:Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0.
published:2025-04-09T18:15:51.060


Instruction: Please provide detailed information about CVE-2025-3475

CVE:CVE-2025-3475
Description:Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0.
published:2025-04-09T18:15:51.170