CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,489 vulnerabilities with CWE-352
CVE-2026-23694 MEDIUM
Aruba HiSpeed Cache < 3.0.5 - Cross-Site Request Forgery via admin-ajax.php
CVE-2026-27513 MEDIUM
Shenzhen Tenda F3 V12.01.01.55 - CSRF
CVSS 4.3
CVE-2026-27146 MEDIUM
GetSimple CMS < 3.3.22 - Authenticated Arbitrary File Upload via CSRF
CVSS 4.5
CVE-2026-26317 HIGH
OpenClaw < 2026.2.14 - Cross-Site Request Forgery via Unvalidated Origin/Referer
CVSS 7.1
CVE-2026-27090 MEDIUM
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-27050 MEDIUM
RealPress <= 1.1.0 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-25422 MEDIUM
Popularis Extra <= 1.2.10 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-25411 MEDIUM
Revision Manager TMC <=2.8.22 - CSRF
CVSS 4.3
CVE-2026-25337 MEDIUM
Coachify <= 1.1.5 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-25322 MEDIUM
PublishPress Revisions <=3.7.22 - CSRF
CVSS 5.4
CVE-2026-25319 MEDIUM
Zita Elementor Site Library <=1.6.6 - CSRF
CVSS 4.3
CVE-2026-1455 MEDIUM
Whatsiplus Scheduled Notification for Woocommerce - CSRF
CVSS 4.3
CVE-2026-2658 MEDIUM
newbee-mall < a069069b07027613bf0e7f571736be86f431faee - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-2112 MEDIUM
Dam Spam Plugin for WordPress <=1.0.8 - CSRF
CVSS 4.3
CVE-2026-2023 MEDIUM
WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery via ajax_save_custom_plugin()
CVSS 4.3
CVE-2026-1072 MEDIUM
Keybase.io Verification Plugin <1.4.5 - CSRF
CVSS 4.3
CVE-2026-1394 MEDIUM
WP Quick Contact Us <= 1.0 - Cross-Site Request Forgery via Settings Update
CVSS 4.3
CVE-2026-1983 MEDIUM
SEATT: Simple Event Attendance <1.5.0 - CSRF
CVSS 4.3
CVE-2026-26075 MEDIUM
fastgpt < 4.14.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-2317 MEDIUM
Google Chrome <145.0.7632.45 - Info Disclosure
CVSS 6.5
CVE-2026-1215 MEDIUM
MMA Call Tracking <= 2.3.15 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2026-24885 MEDIUM
kanboard < 1.2.50 - Cross-Site Request Forgery via ProjectPermissionController
CVSS 5.7
CVE-2026-25812 HIGH
PlaciPy 1.0.0 - Cross-Site Request Forgery
CVSS 8.8
CVE-2026-1082 MEDIUM
TITLE ANIMATOR <= 1.0 - Cross-Site Request Forgery via Settings Page Form Handler
CVSS 4.3
CVE-2026-1785 MEDIUM
WordPress Code Snippets <3.9.4 - CSRF
CVSS 4.3
Details
Vulnerabilities 9,489
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits