CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-44186 MEDIUM
SourceCodester Best Employee Management System 1.0 - Cross-Site Request Forgery in User Update
CVSS 5.4
CVE-2025-47204 MEDIUM
bootstrap-multiselect 1.1.2 - Reflective Cross-Site Scripting via POST Data Echo
CVSS 6.1
CVE-2025-46721 MEDIUM
nosurf < 1.2.0 - Cross-Site Request Forgery Bypass via Referer Header Misuse
CVSS 6.1
CVE-2025-31205 MEDIUM
Safari < 18.5 - Cross-Site Request Forgery
CVSS 6.5
CVE-2025-24223 HIGH
Safari < 18.5 - Memory Corruption via Malicious Web Content
CVSS 8.0
CVE-2025-46743 MEDIUM
SEL Blueframe OS < 1.12.0 - Authenticated Token Reuse After Logout
CVSS 6.3
CVE-2025-46610 HIGH
ARTEC EMA Mail 6.92 - Cross-Site Request Forgery
CVSS 8.8
CVE-2025-4375 MEDIUM
Sparx Systems Pro Cloud Server <6.0.165 - CSRF
CVE-2025-20195 MEDIUM
Cisco IOS XE - Unauthenticated Cross-Site Request Forgery via Web-Based Management Interface
CVSS 4.3
CVE-2025-47685 HIGH
Moloni Contribuinte Checkout <2.0.02 - CSRF
CVSS 7.1
CVE-2025-47684 MEDIUM
Smaily for WP <= 3.1.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-47681 MEDIUM
Ability, Inc Web Accessibility <2.0.9 - CSRF
CVSS 4.3
CVE-2025-47674 MEDIUM
Credova Financial Credova_Financial <= 2.5.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-47667 MEDIUM
LiveAgent <= 4.4.7 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-47661 MEDIUM
codemstory WordPress SimplePay <5.2.11 - CSRF
CVSS 5.4
CVE-2025-47655 HIGH
theMarketer <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-47648 HIGH
axima Pays - WooCommerce Payment Gateway <2.6 - XSS
CVSS 7.1
CVE-2025-47647 MEDIUM
OTWthemes Sidebar Manager Light - CSRF
CVSS 4.3
CVE-2025-47639 HIGH
Supertext Translation and Proofreading <= 4.26 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-47633 MEDIUM
Awin - Advertiser Tracking for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-47624 MEDIUM
DoFollow Case by Case <= 3.5.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-47620 HIGH
Martins Free Monetized Ad Exchange Network <1.0.5 - CSRF
CVSS 7.1
CVE-2025-47614 MEDIUM
LessButtons Social Sharing & Stats <1.6.1 - CSRF
CVSS 4.3
CVE-2025-47609 MEDIUM
EasyMe Connect <= 3.0.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-47606 MEDIUM
Simple Giveaways <= 2.49.0 - Cross-Site Request Forgery
CVSS 4.3
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits