Attributed metadata history

Up to 100 retained publisher events per page for CVE-2025-9897. Withdrawals and unavailable references remain attributed to their publishers.

nvd

observed · 2026-10-12 09:44:05 UTC

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function. This makes it possible for unauthenticated attackers to create or modify background sliders via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Fingerprint: d18c7012df537ed35f1906daf29e14c4effe77489d530082b2cec0897d2d504a

nvd

available · 2026-10-12 04:02:58 UTC

available

Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341