CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-53711 HIGH
Hotlink2Watermark <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-53710 HIGH
ITERAS <= 1.8.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-53707 MEDIUM
Ahmeti Wp Gzel Szler <= 4.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-52479 MEDIUM
Astoundify Jobify < 4.3.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-52477 HIGH
No-nonsense Labs Document & Data Automation <1.6.1 - CSRF
CVSS 7.1
CVE-2024-53750 HIGH
Maeve Lander PayPal Responder - CSRF
CVSS 7.1
CVE-2024-53778 HIGH
Essential Marketer Essential Breadcrumbs - Stored XSS
CVSS 7.1
CVE-2024-11014 MEDIUM
NEC UNIVERGE IX 9.2-10.10.21, 10.8-10.8.27, 10.9-10.9.14 - Cross-Site Request Forgery via Management Interface
CVSS 4.3
CVE-2024-53736 HIGH
Jason Grim Custom Shortcode Sidebars <1.2 - CSRF
CVSS 7.1
CVE-2024-53734 HIGH
Idealien Category Enhancements <1.2 - XSS
CVSS 7.1
CVE-2024-53732 HIGH
WP WOX Footer Flyout Widget - Stored XSS
CVSS 7.1
CVE-2024-10521 MEDIUM
WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action
CVSS 4.3
CVE-2024-11743 MEDIUM
SourceCodester Best House Rental Management System 1.0 - CSRF
CVSS 4.3
CVE-2024-11342 MEDIUM
Skt NURCaptcha <= 3.5.0 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 6.1
CVE-2024-11673 MEDIUM
1000 Projects Bookstore Management System 1.0 - CSRF
CVSS 4.3
CVE-2024-11415 HIGH
WP-Orphanage Extended <= 1.2 - Cross-Site Request Forgery via wporphanageex_menu_settings()
CVSS 8.8
CVE-2024-9665 MEDIUM
Zimbra < 9.0.0 - Cross-Site Request Forgery via GraphQL Endpoint
CVSS 6.5
CVE-2024-11601 HIGH
Sky Addons for Elementor <2.6.1 - CSRF
CVSS 8.1
CVE-2024-8157 MEDIUM
Alphabetical List WordPress Plugin < 1.0.3 - Cross-Site Request Forgery in Settings Update
CVSS 4.3
CVE-2024-5029 MEDIUM
CM Table Of Contents < 1.2.4 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 4.8
CVE-2024-11416 MEDIUM
WIP Incoming Lite <= 1.1.1 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 6.1
CVE-2024-10726 MEDIUM
Friendly Functions for Welcart <1.2.4 - CSRF
CVSS 6.1
CVE-2024-52451 HIGH
Aaron Robbins Post Ideas <2. - CSRF/XSS
CVSS 8.2
CVE-2024-52446 HIGH
Buying Buddy IDX CRM <1.1.12 - CSRF
CVSS 8.8
CVE-2024-52392 MEDIUM
w3speedster < 7.25 - Cross-Site Request Forgery
CVSS 6.3
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits