CVE-2025-48265 – Pektsekye Year Make Model Search for WooCommerce CSRF

May 19, 2025

CVE ID : CVE-2025-48265

Published : May 19, 2025, 3:15 p.m. | 1 hour, 13 minutes ago

Description : Cross-Site Request Forgery (CSRF) vulnerability in Pektsekye Year Make Model Search for WooCommerce allows Cross Site Request Forgery. This issue affects Year Make Model Search for WooCommerce: from n/a through 1.0.11.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-48266 – RealMag777 Active Products Tables for WooCommerce Stored Cross-site Scripting

Next Article CVE-2025-48264 – Artiosmedia Product Code for WooCommerce CSRF

Highlights

CVE-2024-3511 – WSO2 Registry Unauthorized File Access Vulnerability

June 23, 2025

CVE ID : CVE-2024-3511

Published : June 23, 2025, 9:15 a.m. | 5 hours, 31 minutes ago

Description : An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

10 Ways Node.js Development Boosts AI & Real-Time Data (2025-2026 Edition)

Looking to Outsource React.js Development? Here’s What Top Agencies Are Doing Right

Beyond The Hype: What AI Can Really Do For Product Design

BrowserStack launches Chrome extension that bundles 10+ manual web testing tools

How much RAM does your Linux PC really need in 2025?

Have solar at home? Supercharge that investment with this other crucial component

I replaced my MacBook charger with this compact wall unit – and wish I’d done it sooner

5 reasons to switch to an immutable Linux distro today – and which to try first

Sentry Adds Logs Support for Laravel Apps

Sentry Adds Logs Support for Laravel Apps

Efficient Context Management with Laravel’s Remember Functions

Laravel Devtoolbox: Your Swiss Army Knife Artisan CLI

From plateau predictions to buggy rollouts — Bill Gates’ GPT-5 skepticism looks strangely accurate

From plateau predictions to buggy rollouts — Bill Gates’ GPT-5 skepticism looks strangely accurate

We gave OpenAI’s open-source AI a kid’s test — here’s what happened

With GTA 6, next-gen exclusives, and a console comeback on the horizon, Xbox risks sitting on the sidelines — here’s why

CVE-2025-48265 – Pektsekye Year Make Model Search for WooCommerce CSRF

Workday Staff Fall to Social Engineering; Hackers Access Third-Party CRM Platform

Get Ready for the Black Hat USA 2025 CISO Podcast Series from The Cyber Express and Suraksha Catalyst

mypy – static type checker for Python

Vue.js in Laravel: Main Things You Need to Know

I put my AirPods Max away within hours of testing these headphones

CVE-2024-45516 – Zimbra Collaboration Classic UI Cross-Site Scripting Vulnerability

CVE-2024-3511 – WSO2 Registry Unauthorized File Access Vulnerability

Implement prescription validation using Amazon Bedrock and Amazon DynamoDB

CVE-2025-48494 – Gokapi Stored Cross-Site Scripting Vulnerability

CVE-2025-54430 – Apache Dedupe GitHub Token Exfiltration

CVE-2025-48265 – Pektsekye Year Make Model Search for WooCommerce CSRF

Related Posts