CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-49895 MEDIUM
ServerBuddy by PluginBuddy.com < 1.0.5 - Cross-Site Request Forgery to PHP Object Injection
CVSS 6.5
CVE-2025-7688 MEDIUM
WordPress Add User Meta <1.0.1 - CSRF
CVSS 6.1
CVE-2025-8992 MEDIUM
mtons mblog < 3.5.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-54732 MEDIUM
WPDM - Premium Packages <= 6.0.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-54728 MEDIUM
CM On Demand Search And Replace <1.5.2 - CSRF
CVSS 4.3
CVE-2025-53587 HIGH
ApusTheme Findgo <= 1.3.57 - Cross-Site Request Forgery
CVSS 8.8
CVE-2025-53347 MEDIUM
Laborator Kalium <= 3.18.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-53249 MEDIUM
hakeemnala Build App Online <1.0.23 - CSRF
CVSS 6.5
CVE-2025-53219 MEDIUM
pl4g4 WP-Database-Optimizer-Tools - CSRF
CVSS 5.4
CVE-2025-52797 HIGH
josepsitjar StoryMap <= 2.1 - Cross-Site Request Forgery
CVSS 8.2
CVE-2025-52769 MEDIUM
flexostudio flexo-social-gallery <1.0006 - CSRF
CVSS 4.3
CVE-2025-52767 MEDIUM
NetInsight Analytics Implementation Plugin <1.0.4 - CSRF
CVSS 4.3
CVE-2025-52765 HIGH
NetInsight Analytics Implementation Plugin <1.0.4 - CSRF/XSS
CVSS 7.1
CVE-2025-54703 MEDIUM
Prince Integrate Google Drive <1.5.2 - CSRF
CVSS 4.3
CVE-2025-54702 MEDIUM
motov.net Ebook Store <5.8013 - CSRF
CVSS 4.3
CVE-2025-54694 MEDIUM
bPlugins Button Block <1.2.0 - CSRF
CVSS 4.3
CVE-2025-54682 MEDIUM
Connector for Gravity Forms and Google Sheets <= 1.2.4 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-54675 MEDIUM
YITHEMES YITH WooCommerce Popup <1.48.0 - CSRF
CVSS 4.3
CVE-2025-54674 MEDIUM
mklacroix Product Configurator for WooCommerce <1.4.4 - CSRF
CVSS 5.4
CVE-2025-54673 MEDIUM
Ays Pro Chartify < 3.5.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-54672 MEDIUM
Jordy Meow Photo Engine <6.4.3 - CSRF
CVSS 4.3
CVE-2025-54671 MEDIUM
bobbingwide oik <= 4.15.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49044 HIGH
Simple Poll <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-8891 MEDIUM
OceanWP 4.0.9-4.1.1 - Cross-Site Request Forgery via oceanwp_notice_button_click()
CVSS 4.3
CVE-2025-8491 MEDIUM
WordPress Easy restaurant menu manager <2.0.2 - CSRF
CVSS 4.3
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits