Vulnerabilities

TI-2025-21804 CVE-2025-30529 · GHSA-cwvj-wxq8-9qr2

WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Sébastien Dumont Auto Load Next Post auto-load-next-post allows Cross Site Request Forgery.This issue affects Auto Load Next Post: from n/a through <= 1.5.14.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00213 Published 2025-03-24 No fix listed CWE-352

TI-2025-20178 CVE-2025-27331 · GHSA-7927-94hw-7qx3

WordPress WooCommerce Display Products by Tags plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sébastien Dumont WooCommerce Display Products by Tags woocommerce-display-products-by-tags allows DOM-Based XSS.This i…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0022 Published 2025-02-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WooCommerce Display Products by Tags plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability