Логотип exploitDog
bind:CVE-2025-1288
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-1288

Количество 2

Количество 2

nvd логотип

CVE-2025-1288

11 месяцев назад

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-244m-98g9-4pg8

11 месяцев назад

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-1288

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
0%
Низкий
11 месяцев назад
github логотип
GHSA-244m-98g9-4pg8

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
0%
Низкий
11 месяцев назад

Уязвимостей на страницу