Skip to content
OpenAdvisories

Product · funnnny

HidePost

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9896

    HidePost <= 2.3.8 - Cross-Site Request Forgery

    The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.8. This is due to missing or incorrect nonce validation on the options.php settings page. This makes it possible for unauthenticated attack…

    funnnny HidePost Web / CMS