GCVE - cpe:2.3:a:evidentlycube:publish

Approved changes feed: RSS · Atom

cpe:2.3:a:evidentlycube:publish_approval:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Evidentlycube (`7f8c0bd1-861c-5889-b822-8c2a76b6ad8e`)
Product	Publish Approval (`7a5516b2-c36a-5bb4-9f3e-9b5a6b9af4a2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9617`	vulnerable	2026-06-08 07:47:09.379008	Publish approval <= 1.1 - Cross-Site Request Forgery MEDIUM (5.3) The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the publish_save_option function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2025-09-11T07:25:00.969Z Updated: 2026-04-08T17:29:23.729Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/e34ac4aa-65c5-43d7-9b77-d4c6068722f1?source=cve https://plugins.trac.wordpress.org/browser/publish-approval/trunk/src/actions/HandleOptionsSave.php#L6	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.