CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,491 vulnerabilities with CWE-352
CVE-2026-24408 NONE
sigstore-python < 4.2.0 - Cross-Site Request Forgery in OAuth Authentication Flow
CVE-2026-24432 MEDIUM
Shenzhen Tenda W30E V2 <16.01.0.19(5037) - CSRF
CVSS 4.3
CVE-2026-1208 MEDIUM
Friendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery via Settings Page
CVSS 4.3
CVE-2026-1088 MEDIUM
WordPress Login Page Editor <1.2 - CSRF
CVSS 4.3
CVE-2026-1081 MEDIUM
Set Bulk Post Categories <1.1 - CSRF
CVSS 4.3
CVE-2026-1076 MEDIUM
Star Review Manager <= 1.2.2 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2026-1075 MEDIUM
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery via Empty Nonce Bypass
CVSS 4.3
CVE-2026-1070 MEDIUM
Alex User Counter <= 6.0 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2026-24596 MEDIUM
Related Posts Thumbnails Plugin <4.3.1 - CSRF
CVSS 4.3
CVE-2026-24549 MEDIUM
GeoDirectory <= 2.8.149 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-24542 MEDIUM
John James Jacoby WP Term Order <= 2.1.0 - CSRF
CVSS 4.3
CVE-2026-24521 MEDIUM
Kama Thumbnail <= 3.5.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-24384 MEDIUM
Merge + Minify + Refresh <2.15 - CSRF
CVSS 5.4
CVE-2026-24374 MEDIUM
Metagauss RegistrationMagic <= 6.0.6.9 - CSRF
CVSS 5.4
CVE-2026-24365 MEDIUM
WooCommerce Stock Manager <3.6.0 - CSRF
CVSS 5.4
CVE-2026-22483 MEDIUM
teachPress <= 9.0.12 - Cross-Site Request Forgery
CVSS 5.4
CVE-2026-22462 MEDIUM
Add Polylang support for Customizer <= 1.4.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-22382 MEDIUM
Mikado-Themes PawFriends <1.4 - CSRF
CVSS 5.4
CVE-2026-22360 MEDIUM
AA-Team SearchAzon <= 1.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-22359 MEDIUM
AA-Team Wordpress Movies Bulk Importer - CSRF
CVSS 4.3
CVE-2026-22355 HIGH
gregmolnar Simple XML Sitemap <=1.3 - XSS
CVSS 7.1
CVE-2026-1051 MEDIUM
Newsletter - WordPress <9.1.0 - CSRF
CVSS 4.3
CVE-2026-23950 HIGH
node-tar <= 7.5.3 - Arbitrary File Overwrite via Unicode Path Collision Race Condition
CVSS 8.8
CVE-2026-1169 MEDIUM
birkir prime < 0.4.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2026-1153 MEDIUM
technical-laohu mpay < 1.2.4 - Cross-Site Request Forgery
CVSS 4.3
Details
Vulnerabilities 9,491
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits