CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-51636 HIGH
GMO Social Connection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51635 HIGH
Garmur While Loading <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51634 HIGH
Webriti Custom Login <= 0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVSS 7.1
CVE-2024-51633 HIGH
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51632 HIGH
SH Slideshow <= 4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51631 HIGH
Sticky Social Bar <= 2.0 - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-50534 HIGH
Syed Umair Hussain Shah World Prayer Time - CSRF
CVSS 7.1
CVE-2024-50533 HIGH
Domain Sharding <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-43338 MEDIUM
Automattic, Inc. Crowdsignal Dashboard - CSRF
CVSS 4.3
CVE-2024-52424 HIGH
wp-login-customizer <= 1.0 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-48962 HIGH
Apache OFBiz < 18.12.17 - Cross-Site Request Forgery
CVSS 8.8
CVE-2024-5030 LOW
CM Table Of Contents < 1.2.3 - Cross-Site Request Forgery via Settings Reset
CVSS 3.8
CVE-2024-52415 HIGH
Skpstorm SK WP Settings Backup - CSRF
CVSS 8.8
CVE-2024-6628 MEDIUM
EleForms <= 2.9.9.9 - Cross-Site Request Forgery via Form Submission Deletion
CVSS 4.3
CVE-2024-11118 MEDIUM
404 Error Monitor <= 1.1 - Cross-Site Request Forgery via updatePluginSettings()
CVSS 5.3
CVE-2024-51679 HIGH
GentleSource Appointmind <4.0.0 - CSRF
CVSS 7.1
CVE-2024-51659 HIGH
GeekRMX Twitter @Anywhere Plus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51658 HIGH
WP Course Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51156 MEDIUM
07flycms V1.3.9 - Cross-Site Request Forgery via SysNotifyUser Delete Endpoint
CVSS 4.7
CVE-2024-51687 HIGH
Platform.ly Official <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51684 HIGH
W3P SEO < 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-51688 HIGH
FraudLabs Pro SMS Verification <1.10.1 - CSRF
CVSS 7.1
CVE-2024-47914 MEDIUM
VaeMendis Ubooquity 2.1.2-2.1.4 - Cross-Site Request Forgery
CVSS 4.5
CVE-2024-11143 MEDIUM
Kognetiks Chatbot for WordPress <= 2.1.8 - Cross-Site Request Forgery via Assistant Management Functions
CVSS 4.3
CVE-2024-10593 MEDIUM
WPForms < 1.9.1.6 - Unauthenticated Cross-Site Request Forgery via Log Deletion
CVSS 4.3
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits