CWE-352 · Cross-Site Request Forgery (CSRF) (page 24)
Page 24 of 96 — CVEs classified under CWE-352, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1813 | Medium | 4.3 | 2025-03-02 | A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation le… |
CVE-2024-13518 | Medium | 4.3 | 2025-03-01 | The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.10.12. This is due to missing o… |
CVE-2025-25379 | Critical | 9.6 | 2025-02-28 | Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component. |
CVE-2025-1506 | Medium | 4.3 | 2025-02-28 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.0. T… |
CVE-2025-0801 | Medium | 4.3 | 2025-02-28 | The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing o… |
CVE-2025-1687 | High | 8.8 | 2025-02-28 | The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation… |
CVE-2025-1745 | Medium | 4.3 | 2025-02-27 | A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The ma… |
CVE-2024-0392 | Medium | 5.4 | 2025-02-27 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validat… |
CVE-2024-13647 | Medium | 4.3 | 2025-02-27 | The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is d… |
CVE-2025-26925 | Medium | 4.3 | 2025-02-26 | Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/… |
CVE-2024-13560 | Medium | 4.3 | 2025-02-26 | The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.6. This i… |
CVE-2025-26963 | Medium | 5.4 | 2025-02-25 | Cross-Site Request Forgery (CSRF) vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a t… |
CVE-2025-26931 | High | 7.1 | 2025-02-25 | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Tribulant Gallery Voting gallery-voting allows Stored XSS.This issue affects Tribulant Ga… |
CVE-2025-26926 | Medium | 4.3 | 2025-02-25 | Cross-Site Request Forgery (CSRF) vulnerability in fs-code Booknetic booknetic.This issue affects Booknetic: from n/a through <= 4.0.9. |
CVE-2024-13494 | Medium | 4.3 | 2025-02-25 | The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing… |
CVE-2025-1644 | Medium | 4.3 | 2025-02-25 | A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SG_Gravar… |
CVE-2025-1643 | Medium | 4.3 | 2025-02-25 | A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPess… |
CVE-2025-27357 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Musa AVCI Önceki Yazı Link onceki-yazi-linki allows Cross Site Request Forgery.This issue affects Önceki Yaz… |
CVE-2025-27355 | High | 7.1 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Nicolas GRILLET Woocommerce – Loi Hamon loi-hamon allows Stored XSS.This issue affects Woocommerce – Loi Ham… |
CVE-2025-27353 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a thr… |
CVE-2025-27344 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in filipstepanov Phee's LinkPreview linkpreview allows Cross Site Request Forgery.This issue affects Phee's Lin… |
CVE-2025-27342 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in josesan WooCommerce Recargo de Equivalencia woo-recargo-de-equivalencia allows Cross Site Request Forgery.Th… |
CVE-2025-27340 | Medium | 5.4 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Forge12 Interactive GmbH F12-Profiler f12-profiler allows Cross Site Request Forgery.This issue affects F12-… |
CVE-2025-27339 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Will Anderson Minimum Password Strength minimum-password-strength allows Cross Site Request Forgery.This iss… |
CVE-2025-27336 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just Variables just-wp-variables allows Cross Site Request Forgery.This issue af… |
CVE-2025-27335 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Free plug in by SEO Roma Auto Tag Links auto-tag-links allows Cross Site Request Forgery.This issue affects… |
CVE-2025-27332 | High | 7.1 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in gmnazmul Smart Maintenance & Countdown smart-maintenance-countdown allows Stored XSS.This issue affects Smar… |
CVE-2025-27328 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in queeez WP-PostRatings Cheater wp-postratings-cheater allows Cross Site Request Forgery.This issue affects WP… |
CVE-2025-27321 | High | 7.1 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in Blighty Blightly Explorer blighty-explorer allows Stored XSS.This issue affects Blightly Explorer: from n/a… |
CVE-2025-27318 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in ixiter Simple Google Sitemap simple-google-sitemap allows Cross Site Request Forgery.This issue affects Simp… |
CVE-2025-27317 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in IT-RAYS RAYS Grid rays-grid allows Cross Site Request Forgery.This issue affects RAYS Grid: from n/a through… |
CVE-2025-27316 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in hosting.io JPG, PNG Compression and Optimization wp-image-compression allows Cross Site Request Forgery.This… |
CVE-2025-27315 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in wptom All-In-One Cufon all-in-one-cufon allows Cross Site Request Forgery.This issue affects All-In-One Cufo… |
CVE-2025-27311 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bu… |
CVE-2025-27298 | High | 8.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from… |
CVE-2025-27290 | Medium | 4.3 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in seyyed-amir Erima Zarinpal Donate erima-zarinpal-donate allows Cross Site Request Forgery.This issue affects… |
CVE-2025-27277 | High | 7.1 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v01 allows Cross Site Request Forgery.Th… |
CVE-2025-27276 | High | 8.8 | 2025-02-24 | Cross-Site Request Forgery (CSRF) vulnerability in lizeipe Photo Gallery ( Responsive ) photo-gallery-pearlbells allows Privilege Escalation.This issue affects… |
CVE-2025-27012 | High | 8.8 | 2025-02-22 | Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo a1post-bg-shipping-for-woocommerce allows Privilege Escalation.This issue… |
CVE-2025-1557 | Medium | 4.3 | 2025-02-22 | A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3. Affected is an unknown function. The manipulation leads to cross-site request f… |
CVE-2025-25772 | Medium | 5.1 | 2025-02-21 | A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accoun… |
CVE-2025-25770 | Medium | 6.8 | 2025-02-21 | Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java. |
CVE-2025-25769 | High | 8.0 | 2025-02-21 | Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java. |
CVE-2024-13883 | Medium | 4.3 | 2025-02-21 | The WPUpper Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.51. This is due to missing o… |
CVE-2024-7141 | | 2025-02-20 | Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw. | |
CVE-2024-49779 | Medium | 4.3 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, caused by improper validation and manageme… |
CVE-2024-13753 | High | 8.1 | 2025-02-20 | The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to mis… |
CVE-2020-10095 | High | 8.1 | 2025-02-19 | Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device. |
CVE-2024-13339 | Medium | 6.1 | 2025-02-19 | The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.8.0. This is due to missi… |
CVE-2024-13336 | Medium | 4.3 | 2025-02-19 | The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or… |
CVE-2025-0865 | Medium | 6.5 | 2025-02-19 | The WP Media Category Management plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.0 to 2.3.3. This is due to missing or incorrect… |
CVE-2024-13405 | Medium | 4.3 | 2025-02-19 | The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missin… |
CVE-2025-1441 | Medium | 6.1 | 2025-02-19 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. This… |
CVE-2024-13718 | Medium | 4.3 | 2025-02-18 | The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… |
CVE-2024-13795 | Medium | 4.3 | 2025-02-18 | The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27… |
CVE-2024-13523 | Medium | 6.1 | 2025-02-18 | The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorre… |
CVE-2024-13438 | Medium | 4.3 | 2025-02-18 | The SpeedSize Image & Video AI-Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is… |
CVE-2024-13315 | High | 8.8 | 2025-02-18 | The Shopwarden – Automated WooCommerce monitoring & testing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi… |
CVE-2025-0796 | Medium | 4.3 | 2025-02-18 | The Mortgage Lead Capture System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.2.11. This is due to… |
CVE-2024-13852 | High | 8.8 | 2025-02-18 | The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the plugin_page()… |
CVE-2024-13684 | High | 8.1 | 2025-02-18 | The Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce… |
CVE-2024-13555 | Medium | 5.3 | 2025-02-18 | The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a… |
CVE-2024-13522 | Medium | 6.1 | 2025-02-18 | The magayo Lottery Results plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.12. This is due to missin… |
CVE-2025-26768 | High | 7.1 | 2025-02-16 | Cross-Site Request Forgery (CSRF) vulnerability in what3words what3words Address Field 3-word-address-validation-field allows Stored XSS.This issue affects wha… |
CVE-2025-26759 | High | 7.1 | 2025-02-16 | Cross-Site Request Forgery (CSRF) vulnerability in alexvtn Content Snippet Manager content-snippet-manager allows Stored XSS.This issue affects Content Snippet… |
CVE-2025-1358 | Medium | 4.3 | 2025-02-16 | A vulnerability classified as problematic was found in Pix Software Vivaz 6.0.10. This vulnerability affects unknown code. The manipulation leads to cross-site… |
CVE-2024-10581 | Medium | 4.3 | 2025-02-15 | The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missin… |
CVE-2025-24699 | High | 7.1 | 2025-02-14 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting (XSS).This issue affects WP Coder: from n/a throug… |
CVE-2025-22705 | High | 7.1 | 2025-02-14 | Cross-Site Request Forgery (CSRF) vulnerability in godthor Disqus Popular Posts disqus-popular-posts allows Reflected XSS.This issue affects Disqus Popular Pos… |
CVE-2025-23411 | Medium | 6.3 | 2025-02-13 | mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information. An attacker would ne… |
CVE-2025-26582 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-advanced-qtranslate-fix-editor-problems all… |
CVE-2025-26580 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Complete SEO Page/Post Specific Social Share Buttons pagepost-specific-social-share-buttons allows Stored XS… |
CVE-2025-26578 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in mathieuhays Simple Documentation client-documentation allows Stored XSS.This issue affects Simple Documentat… |
CVE-2025-26577 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in daxiawp DX-auto-publish dx-auto-publish allows Stored XSS.This issue affects DX-auto-publish: from n/a throu… |
CVE-2025-26572 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in jesseheap WP PHPList phplist-form-integration allows Cross Site Request Forgery.This issue affects WP PHPLis… |
CVE-2025-26571 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in wibiya Wibiya Toolbar wibiya allows Cross Site Request Forgery.This issue affects Wibiya Toolbar: from n/a t… |
CVE-2025-26570 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9. |
CVE-2025-26569 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Callmeforsox Post Thumbs allows Stored XSS. This issue affects Post Thumbs: from n/a through 1.5. |
CVE-2025-26568 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-information allows Stored XSS.This issue aff… |
CVE-2025-26562 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Shambhu Patnaik RSS Filter rss-filter allows Stored XSS.This issue affects RSS Filter: from n/a through <= 1… |
CVE-2025-26550 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Kunal Shivale Global Meta Keyword & Description global-meta-keyword-and-description allows Stored XSS.This i… |
CVE-2025-26549 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in pa1 WP Html Page Sitemap wp-html-page-sitemap allows Stored XSS.This issue affects WP Html Page Sitemap: fro… |
CVE-2025-26547 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in nagarjunsonti My Login Logout Plugin my-loginlogout allows Stored XSS.This issue affects My Login Logout Plu… |
CVE-2025-26545 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS… |
CVE-2025-26543 | High | 7.1 | 2025-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Pukhraj Suthar Simple Responsive Menu simple-responsive-menu allows Stored XSS.This issue affects Simple Res… |
CVE-2024-12386 | High | 8.1 | 2025-02-12 | The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce val… |
CVE-2024-13437 | Medium | 4.3 | 2025-02-12 | The Book a Room plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9. This is due to missing or incorrect… |
CVE-2025-0808 | Medium | 4.3 | 2025-02-12 | The Houzez Property Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.21. This is due to missing… |
CVE-2019-15002 | Medium | 4.3 | 2025-02-11 | An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker… |
CVE-2025-24900 | High | 8.6 | 2025-02-11 | Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of co… |
CVE-2025-24897 | High | 8.2 | 2025-02-11 | Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, due to a lack of CSRF protectio… |
CVE-2025-24875 | Medium | 6.8 | 2025-02-11 | SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in… |
CVE-2024-9661 | Medium | 4.3 | 2025-02-07 | The WP All Import Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.7. This is due to missing nonc… |
CVE-2025-25168 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting (XSS).This issue affects… |
CVE-2025-25166 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in gabrieldarezzo InLocation inlocation allows Stored XSS.This issue affects InLocation: from n/a through <= 1… |
CVE-2025-25160 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in Mark Barnes Style Tweaker style-tweaker allows Stored XSS.This issue affects Style Tweaker: from n/a through… |
CVE-2025-25156 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in Stanko Metodiev Quote Comments quote-comments allows Stored XSS.This issue affects Quote Comments: from n/a… |
CVE-2025-25154 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custo… |
CVE-2025-25153 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in djjmz Simple Auto Tag simple-auto-tag allows Stored XSS.This issue affects Simple Auto Tag: from n/a through… |
CVE-2025-25152 | High | 7.1 | 2025-02-07 | Cross-Site Request Forgery (CSRF) vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a thr… |