CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,352 vulnerabilities with CWE-352
CVE-2023-46204 MEDIUM
Muller Digital Inc. Duplicate Theme <= 0.1.6 - CSRF
CVSS 4.3
CVE-2023-46202 MEDIUM
Jeff Sherk Auto Login New User After Registration <1.9.6 - CSRF
CVSS 4.3
CVE-2023-46198 MEDIUM
Scientech It Solution Appointment Calendar <2.9.6 - CSRF
CVSS 5.4
CVE-2023-46193 MEDIUM
Internet Marketing Ninjas Internal Link Building <1.2.3 - CSRF
CVSS 4.3
CVE-2023-46191 MEDIUM
Niels van Renselaar Open Graph Metabox <1.4.4 - CSRF
CVSS 4.3
CVE-2023-46190 MEDIUM
Novo-Map < 1.1.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-46189 MEDIUM
Simple Calendar - Google Calendar Plugin <= 3.2.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-46152 MEDIUM
Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional < 1.0.7.2 - CSRF
CVSS 4.3
CVE-2023-46151 MEDIUM
AWESOME TOGI Product Category Tree <2.5 - CSRF
CVSS 4.3
CVE-2023-46150 MEDIUM
WP Military WP Radio <= 3.1.9 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-46095 MEDIUM
Chetan Gole Smooth Scroll Links <1.1.0 - CSRF
CVSS 5.4
CVE-2023-46089 MEDIUM
Lee Le @ Userback Userback <1.0.13 - CSRF
CVSS 4.3
CVE-2023-46085 MEDIUM
Wpmet Wp Ultimate Review <2.2.4 - CSRF
CVSS 4.3
CVE-2023-46078 MEDIUM
PluginEver WC Serial Numbers <1.6.3 - CSRF
CVSS 5.4
CVE-2023-46067 MEDIUM
Qwerty23 Rocket Font <= 1.2.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-5690 HIGH
modoboa < 2.2.2 - Cross-Site Request Forgery
CVSS 8.8
CVE-2023-5687 HIGH
mosparo < 1.0.3 - Cross-Site Request Forgery
CVSS 8.8
CVE-2023-5602 MEDIUM
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery via AJAX Action Nonce Bypass
CVSS 4.3
CVE-2023-5534 MEDIUM
WPBot - AI ChatBot for Live Support, Lead Generation, AI Services <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2023-4926 MEDIUM
BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.1.3.3 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-4924 MEDIUM
BEAR - Bulk Editor and Products Manager Professional for WooCommerce <= 1.1.3.3 - Missing Authorization
CVSS 5.4
CVE-2023-4923 MEDIUM
BEAR - Bulk Editor and Products Manager Professional for WooCommerce <= 1.1.3.3 - Cross-Site Request Forgery
CVSS 5.4
CVE-2023-4975 MEDIUM
Website Builder by SeedProd < 6.15.13.1 - Cross-Site Request Forgery via Stripe Connect Token
CVSS 4.3
CVE-2023-4942 MEDIUM
BEAR for WordPress <= 1.1.3.3 - Cross-Site Request Forgery via woobe_bulkoperations_visibility Function
CVSS 4.3
CVE-2023-4940 MEDIUM
BEAR - Bulk Editor and Products Manager Professional for WooCommerce <= 1.1.3.3 - Cross-Site Request Forgery
CVSS 4.3
Details
Vulnerabilities 9,352
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits