Skip to content
Threat Feed
Subscribe

Vendor

Johan Jonk Stenstroem

1 brief RSS
medium advisory

Cookies and Content Security Policy: Denial of Service via AJAX Endpoint (CVE-2025-51529)

An unauthenticated denial of service vulnerability in the Cookies and Content Security Policy WordPress plugin allows remote attackers to exhaust database resources via unlimited write requests to an unprotected AJAX endpoint.

Cookies and Content Security Policy
1r 1t 1c