cleantalk
Vulnerabilities and Security Researches

VKontakte Cross-Post, CVE-2025-32498

CVE, Research URL

CVE-2025-32498

Home page URL

Security reports for VKontakte Cross-Post

Application

VKontakte Cross-Post

Published on
Apr 09, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in oleglark VKontakte Cross-Post allows Stored XSS. This issue affects VKontakte Cross-Post: from n/a through 0.3.2.
Affected versions
Min -, max 0.3.2.
Status
vulnerable
Previous vulnerability researches
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2023-47816) , Jun 07, 2024
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2018-21011) , Jun 07, 2024
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2021-24531) , Jun 07, 2024
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2022-47441) , Jun 07, 2024
Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress (CVE-2023-4404) , Jun 07, 2024
New vulnerability
WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms (CVE-2025-39560) , Apr 18, 2025
CRUDLab Scroll to Top (CVE-2025-22774) , Apr 18, 2025
Editor Wysiwyg Background Color (CVE-2025-23958) , Apr 18, 2025
Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress (CVE-2025-39592) , Apr 18, 2025
Membership For WooCommerce – Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members wi (CVE-2025-39579) , Apr 18, 2025