CVE-2025-30528

CRITICAL Year: 2025
CVSS v3 Score
9.3
Critical
Weakness Type
CWE-352
View all →

Vulnerability Description

Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos allows SQL Injection. This issue affects Awesome Logos: from n/a through 1.2.

Related Vulnerabilities

CVE-2024-50966

CRITICAL
CVSS:9.3(Critical)

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

CWE-3522024

CVE-2024-42764

CRITICAL
CVSS:9.4(Critical)

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.

CWE-3522024

CVE-2018-20577

CRITICAL
CVSS:9.1(Critical)

Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware...

CWE-3522018

CVE-2024-13720

CRITICAL
CVSS:9.1(Critical)

The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, a...

CWE-3522024

CVE-2024-27448

CRITICAL
CVSS:9.1(Critical)

MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file.

CWE-3522024

CVE-2024-55089

CRITICAL
CVSS:9.1(Critical)

Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function.

CWE-3522024