CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,321 vulnerabilities with CWE-352
CVE-2025-58013 HIGH
CouponXxL <4.5.0 - CSRF/Privilege Escalation
CVSS 8.8
CVE-2025-58010 MEDIUM
straightvisions GmbH SV Proven Expert - CSRF
CVSS 4.3
CVE-2025-57992 MEDIUM
Mail Baby SMTP <= 2.8 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57983 MEDIUM
Damian BP Disable Activation Reloaded - CSRF
CVSS 6.5
CVE-2025-57978 MEDIUM
Themespride Advanced Appointment Booking & Scheduling <1.9 - CSRF
CVSS 4.3
CVE-2025-57977 HIGH
wpdesk Flexible PDF Invoices - CSRF
CVSS 7.1
CVE-2025-57970 MEDIUM
SALESmanago & Leadoo <= 3.8.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57960 MEDIUM
Travel Map <= 1.0.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57946 MEDIUM
Loc Bui payOS <= 1.0.73 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-57942 MEDIUM
andy_moyle Emergency Password Reset <9.0 - CSRF
CVSS 4.3
CVE-2025-57934 MEDIUM
LWS Affiliation <= 2.3.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57933 MEDIUM
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57930 MEDIUM
Kanwei Double the Donation <2.0.0 - CSRF
CVSS 4.3
CVE-2025-57927 MEDIUM
Stephanie Leary Dashboard Notepad - CSRF
CVSS 4.3
CVE-2025-57924 MEDIUM
Automattic Developer < 1.2.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57918 HIGH
ERA404 LinkedInclude <= 3.0.4 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-57915 MEDIUM
TOCHAT.BE <= 1.3.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-57914 MEDIUM
Matat Technologies Deliver via Shipos for WooCommerce <3.0.2 - CSRF
CVSS 4.3
CVE-2025-57905 MEDIUM
AgreeMe Checkboxes For WooCommerce <1.1.3 - CSRF
CVSS 4.3
CVE-2025-57902 MEDIUM
RIS Version Switcher - Downgrade or Upgrade WP Versions Easily <= 1.0 - Cross-Site Request Forgery
CVSS 6.5
CVE-2025-53456 MEDIUM
activewebsight SEO Backlink Monitor - CSRF
CVSS 4.3
CVE-2025-53451 MEDIUM
Mihdan: No External Links <5.1.4 - CSRF
CVSS 5.4
CVE-2025-10759 MEDIUM
Webkul QloApps < 1.7.0 - Authorization Bypass via CSRF Token Manipulation
CVSS 5.3
CVE-2025-9887 MEDIUM
Custom Login And Signup Widget <1.0 - CSRF
CVSS 4.3
CVE-2025-9883 MEDIUM
Browser Sniff plugin - WordPress <2.3 - CSRF
CVSS 6.1
Details
Vulnerabilities 9,321
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits