Vulnerabilities

TI-2026-75197 CVE-2026-12272 · GHSA-phxf-4j8m-r2jf

Sensitive information exposure in Lightweight Cookie Notice plugin

LOW 29

The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY co…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00214 Published 2026-10-16 No fix listed CWE-330

TI-2025-30091 CVE-2025-47594 · GHSA-wgr5-655j-9682

WordPress Soccer Live Scores <= 1.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Soccer Live Scores allows Cross Site Request Forgery.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352

TI-2024-04015 CVE-2024-4312 · GHSA-3hcc-55vp-6852

Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery

LOW 19

The Soccer Engine – Soccer Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00215 Published 2024-05-09 No fix listed CWE-352

TI-2023-26197 CVE-2023-48334 · GHSA-jvfj-8xrf-vq5c

WordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in DAEXT League Table allows Cross Site Request Forgery.This issue affects League Table: from n/a through 1.13.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00269 Published 2023-11-30 No fix listed CWE-352

TI-2023-25127 CVE-2023-46625 · GHSA-xf6r-6c2v-5fv9

WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Autolinks Manager plugin <= 1.10.04 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-13 No fix listed CWE-352

TI-2023-22094 CVE-2023-41669 · GHSA-62h9-w94c-4xc7

WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Live News plugin <= 1.06 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-10-09 No fix listed CWE-352

Vulnerabilities

Filters

Sensitive information exposure in Lightweight Cookie Notice plugin

WordPress Soccer Live Scores <= 1.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery

WordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)