CWE-352 · Cross-Site Request Forgery (CSRF) (page 46)
Page 46 of 96 — CVEs classified under CWE-352, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32744 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions. |
CVE-2023-32739 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress Cursor Plugin plugin < 3.2 versions. |
CVE-2023-32602 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in LOKALYZE CALL ME NOW plugin <= 3.0 versions. |
CVE-2023-32594 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin <= 5.1.5 versions. |
CVE-2023-34177 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Kenth Hagström WP-Cache.Com plugin <= 1.1.1 versions. |
CVE-2023-34171 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions. |
CVE-2023-34169 | Medium | 6.5 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 versions. |
CVE-2023-34033 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin <= 2.0.1 versions. |
CVE-2023-47238 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin <= 3.3.2 versions. |
CVE-2023-47237 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions. |
CVE-2023-34371 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <= 2.22 versions. |
CVE-2023-34182 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Peter Shaw LH Password Changer plugin <= 1.55 versions. |
CVE-2023-34181 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WP-Cirrus plugin <= 0.6.11 versions. |
CVE-2023-34178 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11 versions. |
CVE-2023-46614 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions. |
CVE-2023-34386 | Medium | 4.3 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions. |
CVE-2023-34002 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory Manager plugin <= 2.1.0.13 versions. |
CVE-2023-31087 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. |
CVE-2023-25975 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions. |
CVE-2023-45884 | Medium | 6.5 | 2023-11-09 | Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLay… |
CVE-2023-25994 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions. |
CVE-2023-45857 | Medium | 6.5 | 2023-11-08 | An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for ever… |
CVE-2023-5982 | Medium | 5.4 | 2023-11-07 | The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2… |
CVE-2023-5818 | Medium | 4.3 | 2023-11-07 | The Amazonify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8.1. This is due to missing or incorrect… |
CVE-2023-46242 | Critical | 9.6 | 2023-11-07 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute a conten… |
CVE-2023-32966 | Medium | 5.4 | 2023-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7. |
CVE-2022-47181 | Medium | 4.3 | 2023-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cro… |
CVE-2023-5975 | Medium | 4.3 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect n… |
CVE-2023-5532 | Medium | 6.1 | 2023-11-07 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect n… |
CVE-2023-5902 | Medium | 4.3 | 2023-11-07 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5900 | Low | 3.5 | 2023-11-07 | Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5823 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin <= 2.2.11 versions. |
CVE-2023-47186 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versions. |
CVE-2023-46781 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin <= 1.5 versions. |
CVE-2023-46780 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Alter plugin <= 1.0 versions. |
CVE-2023-46779 | Medium | 5.4 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in EasyRecipe plugin <= 3.5.3251 versions. |
CVE-2023-46778 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in TheFreeWindows Auto Limit Posts Reloaded plugin <= 2.5 versions. |
CVE-2023-46777 | Medium | 5.4 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin <= 1.1.3 versions. |
CVE-2023-46776 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Serena Villa Auto Excerpt everywhere plugin <= 1.5 versions. |
CVE-2023-46775 | Medium | 4.3 | 2023-11-06 | Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin <= 1.18 versions. |
CVE-2023-47182 | High | 7.1 | 2023-11-06 | Cross-Site Request Forgery (CSRF) leading to a Stored Cross-Site Scripting (XSS) vulnerability in Nazmul Hossain Nihal Login Screen Manager plugin <= 3.5.2 ver… |
CVE-2023-5945 | Medium | 4.3 | 2023-11-03 | The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect no… |
CVE-2023-42027 | Medium | 4.3 | 2023-11-03 | IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an… |
CVE-2023-5899 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5898 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5897 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1. |
CVE-2023-5893 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-43295 | Low | 3.5 | 2023-10-31 | Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code… |
CVE-2023-5519 | Medium | 4.3 | 2023-10-31 | The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwan… |
CVE-2023-4251 | Medium | 4.3 | 2023-10-31 | The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwan… |
CVE-2023-45670 | High | 7.5 | 2023-10-30 | Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` endpoints of Frigate do not implement any… |
CVE-2023-42323 | High | 8.8 | 2023-10-30 | Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code via the adminAction.class.php file. |
CVE-2023-43649 | Medium | 4.7 | 2023-10-30 | baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of base… |
CVE-2023-5820 | Critical | 9.6 | 2023-10-27 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce v… |
CVE-2023-46375 | High | 8.8 | 2023-10-27 | ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2023-42188 | Medium | 6.5 | 2023-10-27 | IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2023-45317 | High | 8.8 | 2023-10-26 | The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can… |
CVE-2023-5802 | Medium | 4.3 | 2023-10-26 | Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowledgebase plugin <= 1.3.4 versions. |
CVE-2023-46204 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Muller Digital Inc. Duplicate Theme plugin <= 0.1.6 versions. |
CVE-2023-46202 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration plugin <= 1.9.6 versions. |
CVE-2023-46198 | Medium | 5.4 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Scientech It Solution Appointment Calendar plugin <= 2.9.6 versions. |
CVE-2023-46193 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <= 1.2.3 versions. |
CVE-2023-46191 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Niels van Renselaar Open Graph Metabox plugin <= 1.4.4 versions. |
CVE-2023-46190 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin <= 1.1.2 versions. |
CVE-2023-46189 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions. |
CVE-2023-46152 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions. |
CVE-2023-46151 | Medium | 4.3 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions. |
CVE-2023-46150 | Medium | 5.4 | 2023-10-25 | Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin <= 3.1.9 versions. |
CVE-2023-46095 | Medium | 5.4 | 2023-10-22 | Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole Smooth Scroll Links [SSL] plugin <= 1.1.0 versions. |
CVE-2023-46089 | Medium | 4.3 | 2023-10-22 | Cross-Site Request Forgery (CSRF) vulnerability in Lee Le @ Userback Userback plugin <= 1.0.13 versions. |
CVE-2023-46085 | Medium | 4.3 | 2023-10-22 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions. |
CVE-2023-46078 | Medium | 5.4 | 2023-10-21 | Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions. |
CVE-2023-46067 | Medium | 4.3 | 2023-10-21 | Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Font plugin <= 1.2.3 versions. |
CVE-2023-5690 | High | 8.8 | 2023-10-20 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. |
CVE-2023-5687 | High | 8.8 | 2023-10-20 | Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3. |
CVE-2023-5602 | Medium | 4.3 | 2023-10-20 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2… |
CVE-2023-5534 | Medium | 4.3 | 2023-10-20 | The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2. This is due to missing or in… |
CVE-2023-4926 | Medium | 5.4 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-4924 | Medium | 5.4 | 2023-10-20 | The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability checks on the woobe_… |
CVE-2023-4923 | Medium | 5.4 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2022-2441 | High | 8.8 | 2023-10-20 | The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to, and including 1.7.5. This ma… |
CVE-2021-4418 | Medium | 4.3 | 2023-10-20 | The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or in… |
CVE-2020-36759 | Medium | 4.3 | 2023-10-20 | The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or inc… |
CVE-2020-36758 | Medium | 4.3 | 2023-10-20 | The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.2. This is due to missing o… |
CVE-2020-36755 | Medium | 4.3 | 2023-10-20 | The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonc… |
CVE-2020-36754 | Medium | 4.3 | 2023-10-20 | The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2. This is due to missing or i… |
CVE-2020-36753 | Medium | 4.3 | 2023-10-20 | The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce v… |
CVE-2020-36751 | Medium | 4.3 | 2023-10-20 | The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect… |
CVE-2023-4975 | Medium | 4.3 | 2023-10-20 | The Website Builder by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.13.1. This is due to mi… |
CVE-2023-4942 | Medium | 4.3 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-4940 | Medium | 4.3 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-4937 | Medium | 4.3 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-4935 | Medium | 4.3 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-4920 | Medium | 4.3 | 2023-10-20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validat… |
CVE-2023-44385 | High | 8.6 | 2023-10-19 | The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. Attackers may send malicious links/QRs t… |
CVE-2023-45992 | Critical | 9.6 | 2023-10-19 | A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attack… |
CVE-2023-42435 | Medium | 5.5 | 2023-10-19 | The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a… |
CVE-2023-3254 | Medium | 4.3 | 2023-10-18 | The Widgets for Google Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.9. This is due to missing… |
CVE-2023-5626 | High | 8.8 | 2023-10-18 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16. |
CVE-2023-45907 | High | 8.8 | 2023-10-17 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete. |