CWE-352
Medium likelihoodCross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
9,347 vulnerabilities with CWE-352
CVE-2024-48047
MEDIUM
Razon Komar Pal Linked Variation for WooCommerce - CSRF
CVSS 4.3
CVE-2024-48038
MEDIUM
wp-Monalisa <= 6.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-9352
MEDIUM
Forminator Forms < 1.35.1 - Cross-Site Request Forgery via Custom Form Create Module
CVSS 4.3
CVE-2024-9351
MEDIUM
Forminator Forms < 1.35.1 - Cross-Site Request Forgery via Quiz Create Module
CVSS 4.3
CVE-2024-48758
MEDIUM
dingfanzu_cms V1.0 - Cross-Site Request Forgery via doAdminAction.php addPro Parameter
CVSS 6.1
CVE-2024-20421
HIGH
Cisco ATA 190 Series Firmware < 12.0.2 (ATA 191) and < 11.2.5 (ATA 192) - Cross-Site Request Forgery
CVSS 7.1
CVE-2024-45693
HIGH
Apache CloudStack 4.15.1.0-4.18.2.3 and 4.19.0.0-4.19.1.1 - Cross-Site Request Forgery
CVSS 8.0
CVE-2024-8507
HIGH
WordPress File Manager Pro <8.3.9 - CSRF
CVSS 8.8
CVE-2024-9649
MEDIUM
WP ULike < 4.7.4 - Cross-Site Request Forgery via wp_ulike_delete_history_api
CVSS 4.3
CVE-2024-49340
MEDIUM
IBM Watson Studio Local 1.2.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-21202
MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.59, 8.60, 8.61 - Cross-Site Request Forgery
CVSS 6.1
CVE-2024-41344
HIGH
CodeIgniter 3.1.13 - Cross-Site Request Forgery
CVSS 7.5
CVE-2024-48913
MEDIUM
Hono < 4.6.5 - CSRF Protection Bypass via Missing Content-Type Header
CVSS 5.9
CVE-2024-48278
MEDIUM
Phpgurukul User Registration & Login and User Management System 3.2 - Cross-Site Request Forgery via Edit Profile
CVSS 5.5
CVE-2024-45737
MEDIUM
Splunk < 9.1.6 - CSRF
CVSS 4.3
CVE-2024-46911
MEDIUM
Apache Roller < 6.1.4 - Cross-Site Request Forgery and Privilege Escalation via Weblog Content Publishing
CVSS 4.7
CVE-2024-6959
HIGH
lollms_web_ui 9.8 - Denial of Service via Malformed Multipart Boundary
CVSS 7.1
CVE-2024-9778
MEDIUM
ImagePress - Image Gallery <= 1.2.2 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2024-9592
MEDIUM
Easy PayPal Gift Certificate <1.2.3 - CSRF
CVSS 6.1
CVE-2024-8477
MEDIUM
Brevo WordPress plugin <3.1.87 - CSRF
CVSS 4.3
CVE-2024-47828
MEDIUM
ampache < 6.6.0 - Cross-Site Request Forgery via Playlist Deletion
CVSS 5.3
CVE-2024-44028
HIGH
NiceJob < 3.6.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2024-47635
MEDIUM
TinyPNG <= 3.4.3 - Cross-Site Request Forgery
CVSS 5.4
CVE-2024-47846
HIGH
Mediawiki Cargo 3.6.X < 3.6.1 - Cross-Site Request Forgery
CVSS 8.8
CVE-2024-43684
HIGH
Microchip TimeProvider 4100 Firmware 1.0-2.4.6 - Cross-Site Request Forgery and Cross-Site Scripting
CVSS 8.8
Details
Vulnerabilities
9,347
Exploit Likelihood
Medium