Skip to content
OpenAdvisories

Vendor

bittokazi

3 known vulnerabilities.

Products

Custom Login And Signup Widget 2 Frndzk Expandable Bottom Bar 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9887

    Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery

    The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation in the /frndzk_adminclsw.php file. This makes it possible for u…

    bittokazi Custom Login And Signup Widget Web / CMS
  • Medium 5.5
    CVE-2025-2510

    Frndzk Expandable Bottom Bar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter

    The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authentica…

    bittokazi Frndzk Expandable Bottom Bar Web / CMS