pressmaximum vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-8669Customify (WordPress theme) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-10-03CVE Database V5CVE-2025-8669 The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. EPSS 0.2%Vulnerability pressmaximum CWE-352	CVE Database V5	2025-10-03
High	7.1	EPSS 0.2%	CVE-2025-30857Currency Switcher for WooCommerce (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-03-27CVE Database V5CVE-2025-30857 Cross-Site Request Forgery (CSRF) vulnerability in PressMaximum Currency Switcher for WooCommerce currency-switcher-for-woocommerce allows Stored XSS.This issue affects Currency Switcher for WooCommerce: from n/a through <= 0.0.7. EPSS 0.2%Vulnerability PressMaximum	CVE Database V5	2025-03-27

Page 1 of 1