← Back

Wp Plugin Manager

wp_plugin_manager

Vendor: Hasthemes • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-64271
1Hasthemes
1Wp Plugin Manager
Apr 27, 2026
Nov 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through <= 1.4.7.
CVE-2023-1088
1Hasthemes
1Wp Plugin Manager
Feb 19, 2025
Mar 27, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack