CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-51669 MEDIUM
Vivwebs Dynamic Widgets <1.6.4 - CSRF
CVSS 4.3
CVE-2024-52421 HIGH
WP Popup Window Maker <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-52420 MEDIUM
Creative Motion Disable Admin Notices <1.3.5 - CSRF
CVSS 4.3
CVE-2024-52402 CRITICAL
Cliconomics Exclusive Content Password Protect - CSRF
CVSS 9.6
CVE-2024-52401 CRITICAL
Hacklog DownloadManager <2.1.4 - CSRF
CVSS 9.6
CVE-2024-52388 HIGH
Hebrew Date <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51686 MEDIUM
Deepak Khokhar, Surender Khokhar Manage User Columns - CSRF
CVSS 4.3
CVE-2024-51657 HIGH
Woopy Plugins SmartLink Dynamic URLs <1.1.0 - CSRF
CVSS 7.1
CVE-2024-51656 HIGH
Flash Show And Hide Box <1.6 - CSRF
CVSS 7.1
CVE-2024-51655 HIGH
Microkid Custom Author URL <2.0.1 - CSRF
CVSS 7.1
CVE-2024-51654 HIGH
APK Downloader <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51653 HIGH
Mario Spinaci UPDATE NOTIFICATIONS <0.3.4 - XSS
CVSS 7.1
CVE-2024-51652 HIGH
Prem Nawaz Khan, Victor Tsaran, Ron Feathers, Marc Kocher Skip To <...
CVSS 7.1
CVE-2024-51650 HIGH
Scott @ MyDollarPlan.com Random Featured Post <1.1.3 - CSRF
CVSS 7.1
CVE-2024-51649 HIGH
Patrick Lumumba Mobilize -<3.0.7 - CSRF
CVSS 7.1
CVE-2024-51648 HIGH
e-shops <= 1.0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVSS 7.1
CVE-2024-51645 HIGH
ThemeFuse Maintenance Mode -n/a-1.1.3 - XSS
CVSS 7.1
CVE-2024-51644 HIGH
Sam Wilson Addressbook <1.1.3 - CSRF
CVSS 7.1
CVE-2024-51643 HIGH
Rajan Agaskar Amazon Associate Filter - XSS
CVSS 7.1
CVE-2024-51642 HIGH
Seo Free <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51641 HIGH
jcmlmorav Advanced PDF Generator <0.4.0 - CSRF
CVSS 7.1
CVE-2024-51640 HIGH
MDR Webmaster Tools <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51639 HIGH
Naver Blog <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51638 HIGH
Awesome Shortcodes For Genesis - CSRF
CVSS 7.1
CVE-2024-51637 HIGH
Scott E. Royalty Admin SMS Alert <1.1.0 - CSRF
CVSS 7.1
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits