CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-32789 HIGH
Seers < 8.1.0 - Cross-Site Request Forgery to Cross-Site Scripting
CVSS 7.1
CVE-2024-32785 HIGH
The Pack Elementor addons <= 2.0.8.3 - Cross-Site Request Forgery to Cross-Site Scripting
CVSS 7.1
CVE-2024-1756 MEDIUM
WooCommerce Customers Manager < 29.8 - Authenticated Information Disclosure via AJAX Action
CVSS 6.5
CVE-2024-32693 HIGH
ValvePress Automatic <3.93.0 - CSRF
CVSS 7.6
CVE-2024-3932 LOW
Totara LMS < 18.7 - Cross-Site Request Forgery in User Selector
CVSS 3.1
CVE-2024-3825 MEDIUM
BlazeMeter Jenkins Plugin < 4.22 - Credential Enumeration
CVSS 4.3
CVE-2024-32538 MEDIUM
Easy CountDowner <= 1.0.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
CVSS 6.5
CVE-2024-32550 HIGH
BMI Adult & Kid Calculator <1.2.1 - CSRF
CVSS 7.1
CVE-2024-32549 HIGH
Microkid Related Posts <4.0.3 - CSRF/XSS
CVSS 7.1
CVE-2024-31503 HIGH
Dolibarr ERP CRM < 19.0.1 - Authenticated Session Cookie and CSRF Token Theft via Crafted Web Page
CVSS 7.5
CVE-2024-21044 MEDIUM
Oracle Complex Maintenance, Repair, and Overhaul 12.2.3-12.2.13 - Unauthenticated Cross-Site Request Forgery in LOV
CVSS 6.1
CVE-2024-21043 MEDIUM
Oracle Complex Maintenance, Repair, and Overhaul 12.2.3-12.2.13 - Cross-Site Request Forgery in LOV
CVSS 6.1
CVE-2024-21032 MEDIUM
Oracle Complex Maintenance, Repair, and Overhaul 12.2.3-12.2.13 - Unauthenticated Cross-Site Request Forgery
CVSS 6.1
CVE-2024-21020 MEDIUM
Oracle Complex Maintenance, Repair, and Overhaul 12.2.3-12.2.13 - Unauthenticated Cross-Site Request Forgery
CVSS 6.1
CVE-2024-3873 MEDIUM
SMI SMI-EX-5414W < 1.0.03 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-3782 HIGH
WBSAirback 21.02.04 - Cross-Site Request Forgery
CVSS 8.8
CVE-2024-31389 MEDIUM
MihanPanel < 12.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2024-31388 MEDIUM
Pauple Table & Contact Form 7 Database - Tablesome - CSRF
CVSS 4.3
CVE-2024-31385 MEDIUM
ReDi Restaurant Reservation <24.0128 - CSRF
CVSS 4.3
CVE-2024-31384 MEDIUM
Spa and Salon < 1.2.7 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-31383 MEDIUM
PopularFX < 1.2.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-31382 MEDIUM
Blocksy <= 2.0.22 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-31381 MEDIUM
Spotlight Social Media Feeds < 1.6.10 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-31379 MEDIUM
Smash Balloon Social Post Feed <4.2.1 - CSRF
CVSS 4.3
CVE-2024-31378 MEDIUM
MailMunch MailChimp Forms by MailMunch <= 3.2.1 - Cross-Site Request Forgery
CVSS 5.4
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits