Anthologize Vulnerabilities

The Anthologize plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administr...

CVSS:

4.3

Affected:

up to 0.8.3

Fix:

No patched version reported

Disclosed:

Apr 17, 2025

CVE-2025-39437 on NVD →

The Anthologize plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administr...

CVSS:

4.3

Affected:

up to 0.8.2

Fixed in:

0.8.3

Disclosed:

Mar 27, 2025

CVE-2025-30823 on NVD →

The Anthologize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’, 'post_status' and other parameters in versions up to, and including, 0.8.0 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level attackers to inject arbitrary web...

CVSS:

5.5

Affected:

up to 0.8.0

Fixed in:

0.8.1

Disclosed:

Nov 17, 2022

CVE-2022-44591 on NVD →