CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,348 vulnerabilities with CWE-352
CVE-2023-7269 HIGH
ArtPlacer Widget < 2.21.1 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 7.5
CVE-2023-47677 HIGH
Realtek rtl819x Jungle SDK v3.4.11 - Cross-Site Request Forgery via Boa CSRF Protection Bypass
CVSS 8.8
CVE-2023-25697 MEDIUM
GamiPress < 2.5.6 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-50900 MEDIUM
Averta Master Slider <= 3.9.10 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-6492 MEDIUM
Simple Sitemap - Create a Responsive HTML Sitemap <= 3.5.13 - Cross-Site Request Forgery via admin_notices Hook
CVSS 4.3
CVE-2023-47845 MEDIUM
Grab & Save < 1.0.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-6968 HIGH
The Moneytizer < 9.6.3 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 8.1
CVE-2023-7045 MEDIUM
GitLab 13.11-16.10.5 16.11-16.11.2 17.0 - Cross-Site Request Forgery via Kubernetes Agent Server
CVSS 5.4
CVE-2023-44478 HIGH
WP Hive Events Rich Snippets for Google - CSRF
CVSS 7.1
CVE-2023-7065 MEDIUM
Stop Spammers Security < 2024.4 - Cross-Site Request Forgery via sfs_process AJAX Action
CVSS 5.4
CVE-2023-41864 MEDIUM
PeproDev CF7 Database < 1.8.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-6385 MEDIUM
WordPress Ping Optimizer <2.35.1.3.0 - CSRF
CVSS 4.3
CVE-2023-49965 MEDIUM
SpaceX Starlink Wi-Fi router Gen 2 <2023.48.0 - XSS
CVSS 6.8
CVE-2023-44999 MEDIUM
WooCommerce Stripe Payment Gateway < 7.6.0 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-39311 HIGH
Fusion Builder < 3.11.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2023-49838 MEDIUM
KlbTheme Clotya, Cosmetsy, Furnob, Bacola, Partdo, Medibazar, Machic themes - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-51416 MEDIUM
EnvaloSimple < 2.2 - Cross-Site Request Forgery
CVSS 6.5
CVE-2023-51487 MEDIUM
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-51486 MEDIUM
WooCommerce PDF Invoice Builder <1.2.101 - CSRF
CVSS 5.4
CVE-2023-51474 HIGH
Pixelemu TerraClassifieds <2.0.3 - CSRF
CVSS 8.8
CVE-2023-51521 MEDIUM
ExpressTech Quiz And Survey Master - CSRF
CVSS 5.4
CVE-2023-51512 MEDIUM
WBW Product Table by WBW <= 1.8.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-51510 MEDIUM
Atlas Gondal Export Media URLs <= 1.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-51491 MEDIUM
Averta Depicter Slider <2.0.6 - CSRF
CVSS 5.4
CVE-2023-51489 MEDIUM
Automattic, Inc. Crowdsignal Dashboard - CSRF
CVSS 5.4
Details
Vulnerabilities 9,348
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits