Skip to content
OpenAdvisories

Vendor

arkapravamajumder

2 known vulnerabilities.

Products

Back To Top 1 TITLE ANIMATOR 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-1082

    TITLE ANIMATOR <= 1.0 - Cross-Site Request Forgery to Settings Update

    The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings page form handler in `inc/settings-page.php`. This makes it possible for una…

    arkapravamajumder TITLE ANIMATOR Web / CMS
  • Medium 4.3
    CVE-2025-28940

    WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through <= 2.0.

    arkapravamajumder Back To Top