Mpwizard Vulnerabilities

[en] In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devres_release_all() only gets called if the device has a bus and has been probed. This leads to issues when using bus-less or driver-less devices where the dev...

Affected:

up to 1.2.1

Fix:

No patched version reported

Disclosed:

Oct 4, 2025

CVE-2023-53596 on NVD →

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for unauthenticated attackers...

CVSS:

4.3

Affected:

up to 1.2.1

Fix:

No patched version reported

Disclosed:

Oct 2, 2025

CVE-2025-9885 on NVD →

Affected:

up to 1.2.1

Fix:

No patched version reported

CVE-2025-9885 on NVD →