CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-54408 MEDIUM
Jake H. YouTube Video Grid <1.9 - CSRF
CVSS 6.5
CVE-2024-54407 HIGH
CK & SyntaxHighlighter <3.4.2 - CSRF/XSS
CVSS 7.1
CVE-2024-54405 HIGH
ECT Social Share <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54404 HIGH
MDC Comment Toolbar <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54401 HIGH
Turcu Ciprian Advanced Fancybox -n/a-1.1.1 - XSS
CVSS 7.1
CVE-2024-54400 HIGH
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54399 HIGH
CRUDLab Google Plus Button <1.0.2 - CSRF
CVSS 7.1
CVE-2024-54398 HIGH
Project Caruso Flaming Forms <1.0.1 - CSRF
CVSS 7.1
CVE-2024-54397 HIGH
Go Animate - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-54396 MEDIUM
Bet sport Free <= 1.0.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-54394 HIGH
Mandrill WP <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54393 HIGH
Sheikh Heera WP Fiddle <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54392 HIGH
Midoks WP <= 5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54391 HIGH
WordPress Filter <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54389 HIGH
Eduardo Chiaro addWeather <2.5.1 - CSRF
CVSS 7.1
CVE-2024-54388 HIGH
Phuc Pham Multiple Admin Emails - CSRF
CVSS 7.1
CVE-2024-54386 HIGH
Push Monkey Pro - Web Push Notifications & WooCommerce Abandoned Ca...
CVSS 7.1
CVE-2024-54372 CRITICAL
Sourov Amin Insertify <1.1.4 - CSRF
CVSS 9.6
CVE-2024-54368 CRITICAL
Ruben Garza, Jr. GitSync <1.1.0 - CSRF
CVSS 9.6
CVE-2024-54356 MEDIUM
vCita.com Online Booking & Scheduling Calendar for WordPress <4.5 -...
CVSS 5.4
CVE-2024-54355 MEDIUM
brandtoss WP Mailster <1.8.17.0 - CSRF
CVSS 4.3
CVE-2024-54353 HIGH
WPGear Hack-Info <= 3.17 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-54352 HIGH
Sogrid <1.5.2 - CSRF/Privilege Escalation
CVSS 8.8
CVE-2024-54332 HIGH
WPFactory WP Currency Exchange Rates -<1.2.0 - XSS
CVSS 7.1
CVE-2024-54331 HIGH
I Plant A Tree <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits