CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-49317 MEDIUM
WP Page Loading <= 1.0.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49291 MEDIUM
Calculated Fields Form <= 5.3.58 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49286 MEDIUM
WP Table Builder <= 2.0.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49285 MEDIUM
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 3.8.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49284 MEDIUM
WP Maintenance Mode & Site Under Construction <4.3 - CSRF
CVSS 4.3
CVE-2025-49283 MEDIUM
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49273 MEDIUM
WP Tools <= 5.24 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49269 MEDIUM
Anton Vanyukov Market Exporter <2.0.22 - CSRF
CVSS 4.3
CVE-2025-49239 MEDIUM
Print Invoice & Delivery Notes for WooCommerce <5.5.0 - CSRF
CVSS 5.4
CVE-2025-49238 MEDIUM
Everest Backup <= 2.3.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-49237 HIGH
POEditor <= 0.9.10 - Cross-Site Request Forgery to Arbitrary File Deletion
CVSS 7.4
CVE-2025-30995 HIGH
OTWthemes Widgetize Pages Light -<3.0 - XSS
CVSS 7.1
CVE-2025-30994 MEDIUM
CubeWP < 1.1.29 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30986 MEDIUM
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-30981 MEDIUM
WP-Recall <16.26.14 - CSRF/Privilege Escalation
CVSS 6.3
CVE-2025-30980 MEDIUM
Alessandro Piconi Simple Keyword to Link - CSRF
CVSS 4.3
CVE-2025-30968 MEDIUM
jokerbr313 Advanced Post List <0.5.6.2 - CSRF
CVSS 5.4
CVE-2025-30956 MEDIUM
Booqable Rental < 2.4.25 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30948 MEDIUM
Giraphix Creative Layouts for Elementor - CSRF
CVSS 4.3
CVE-2025-30946 MEDIUM
Michael Cannon Custom Bulk/Quick Edit <1.6.10 - CSRF
CVSS 4.3
CVE-2025-30632 MEDIUM
Pozzad Global Translator <2.0.2 - CSRF
CVSS 5.4
CVE-2025-30629 MEDIUM
Codehaveli Bitly URL Shortener <= 1.4.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-29005 MEDIUM
weblizar HR Management Lite <3.3 - CSRF
CVSS 4.3
CVE-2025-28986 HIGH
Epicwin Plugin <1.5 - CSRF/SQL Injection
CVSS 8.2
CVE-2025-28984 MEDIUM
WooCommerce Subscription Renewal Reminders <1.3.7 - CSRF
CVSS 4.3
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits