CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,491 vulnerabilities with CWE-352
CVE-2026-1785 MEDIUM
WordPress Code Snippets <3.9.4 - CSRF
CVSS 4.3
CVE-2026-1835 MEDIUM
lcg0124 BootDo <e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb - CSRF
CVSS 4.3
CVE-2026-25155 MEDIUM
qwik < 1.12.0 - Cross-Site Request Forgery via Incorrect Content-Type Header Parsing
CVSS 5.9
CVE-2026-25151 MEDIUM
Qwik and Qwik City < 1.19.0 - Cross-Site Request Forgery via Crafted Content-Type Header
CVSS 5.9
CVE-2026-24434 MEDIUM
Shenzhen Tenda AC7 <V03.03.03.01_cn - CSRF
CVSS 6.5
CVE-2026-24666 MEDIUM
Open eClass Platform < 4.2 - Cross-Site Request Forgery in Teacher-Restricted Endpoints
CVSS 6.5
CVE-2026-25024 MEDIUM
ThirstyAffiliates <= 3.11.9 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-25015 MEDIUM
Stiofan UsersWP <= 1.2.53 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-25014 MEDIUM
themelooks Enter Addons <= 2.3.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-24986 MEDIUM
Simple Membership WP user Import <= 1.9.1 - CSRF
CVSS 5.4
CVE-2026-24966 MEDIUM
Copyscape Premium <= 1.4.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-24962 MEDIUM
Brainstorm Force Sigmize <0.0.10 - CSRF
CVSS 4.3
CVE-2026-24942 MEDIUM
WpEvently <= 5.1.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-20704 MEDIUM
WRC-X1500GS-B/WRC-X1500GSA-B - CSRF
CVSS 4.3
CVE-2026-1447 MEDIUM
Mail Mint < 1.19.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting via Contact Note Creation
CVSS 5.4
CVE-2026-25221 HIGH
PolarLearn 0-PRERELEASE-15 - Login Cross-Site Request Forgery via OAuth State Parameter
CVSS 8.1
CVE-2026-24007 MEDIUM
Tuleap < 17.0-9 - Cross-Site Request Forgery in Overview Inconsistent Items
CVSS 4.6
CVE-2026-0658 MEDIUM
Five Star Restaurant Reservations <2.7.9 - CSRF
CVSS 4.3
CVE-2026-1745 MEDIUM
SourceCodester Medical Certificate Generator App 1.0 - CSRF
CVSS 4.3
CVE-2026-1165 MEDIUM
Popup Box <= 6.1.1 - Cross-Site Request Forgery via Flawed Nonce Implementation
CVSS 4.3
CVE-2026-1398 MEDIUM
Change WP URL <= 1.0 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2026-1380 MEDIUM
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery via Settings Page
CVSS 4.3
CVE-2026-1377 MEDIUM
imwptip < 1.1 - Cross-Site Request Forgery via Settings Update
CVSS 4.3
CVE-2026-0818 MEDIUM
Thunderbird < 140.7.1 and 140.* < 140.7.1 and < 147.0.1 - Information Disclosure via CSS and Remote Content
CVSS 4.3
CVE-2026-24345 HIGH
EZCast Pro II Firmware 1.17478.146 - Cross-Site Request Forgery in Admin UI
CVSS 8.8
Details
Vulnerabilities 9,491
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits