Skip to content
OpenAdvisories

Vendor

frapesce

1 known vulnerabilities.

Products

Rabbit Hole 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-13366

    Rabbit Hole <= 1.1 - Cross-Site Request Forgery to Settings Reset

    The Rabbit Hole plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the plugin's reset functionality. This makes it possible for unauthenticated at…

    frapesce Rabbit Hole Web / CMS