CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-49627 MEDIUM
Noor Alam WordPress Image SEO <1.1.4 - CSRF
CVSS 4.3
CVE-2024-49306 MEDIUM
WP Content Copy Protection & No Right Click <= 3.5.9 - Cross-Site Request Forgery
CVSS 5.3
CVE-2024-49290 MEDIUM
Cooked Pro < 1.8.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-49275 MEDIUM
IdeaPush <= 8.69 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-49274 MEDIUM
Infomaniak VOD Infomaniak <= 1.5.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2024-49272 MEDIUM
wpweb Social Auto Poster <= 5.3.15 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-49250 MEDIUM
Table of Contents Plus <= 2408 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-47634 MEDIUM
CartBounty - WooCommerce <8.2 - CSRF
CVSS 5.4
CVE-2024-49629 HIGH
Fahad Mahmood Endless Posts Navigation <2.2.7 - CSRF
CVSS 7.1
CVE-2024-49617 HIGH
Bhaskar Dhote Back Link Tracker - CSRF
CVSS 8.2
CVE-2024-49615 HIGH
SafetyForms <= 1.0.0 - Cross-Site Request Forgery to Blind SQL Injection
CVSS 8.2
CVE-2024-49605 HIGH
Avchat.Net AVChat Video Chat <2.2 - CSRF
CVSS 7.1
CVE-2024-49335 HIGH
GoogleDrive folder list <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-49622 HIGH
Apa Apa Banner Slider <1.0.0 - CSRF/XSS
CVSS 8.2
CVE-2024-49621 HIGH
Apa APA Register Newsletter Form <1.0.0 - CSRF/XSS
CVSS 8.2
CVE-2024-10040 MEDIUM
Infinite-Scroll < 2.6.2 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 5.3
CVE-2024-49313 HIGH
RudeStan VKontakte Wall Post <2.0 - CSRF
CVSS 7.1
CVE-2024-49304 MEDIUM
Pinpoint Booking System <2.9.9.5.1 - CSRF
CVSS 5.4
CVE-2024-49237 HIGH
ahmeti Ahmeti Wp Timeline <= 5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-49223 HIGH
CJ Change Howdy <= 3.3.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-49221 HIGH
cSlider <= 2.4.2 - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-49220 HIGH
Cookie Scanner <= 1.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-48048 HIGH
Wsify Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-48037 MEDIUM
A WP Life Contact Form Widget <1.4.2 - CSRF
CVSS 5.4
CVE-2024-48031 MEDIUM
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
CVSS 6.5
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits