CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-46251 HIGH
VikRestaurants Table Reservations & Take-Away <1.3.3 - CSRF
CVSS 7.1
CVE-2025-46249 MEDIUM
Michael Simple calendar for Elementor <1.6.4 - CSRF
CVSS 4.3
CVE-2025-46246 MEDIUM
CM Answers <= 3.3.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-46245 MEDIUM
CM Ad Changer <= 2.0.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-46243 MEDIUM
sonalsinha21 Recover abandoned cart for WooCommerce - CSRF
CVSS 4.3
CVE-2025-46241 HIGH
Appointment Booking Calendar <1.3.92 - CSRF
CVSS 8.2
CVE-2025-46231 MEDIUM
SERVIT Software Solutions affiliate-toolkit <3.7.3 - CSRF
CVSS 5.4
CVE-2025-3843 MEDIUM
panhainan DS-Java 1.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-3808 MEDIUM
zhenfeng13 My-BBS 1.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-2111 HIGH
Insert Headers And Footers <= 3.1.1 - Cross-Site Request Forgery via custom_plugin_set_option
CVSS 7.5
CVE-2025-3284 MEDIUM
User Registration PRO WordPress Plugin <= 5.1.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-28355 MEDIUM
Volmarg Personal Management System 1.4.65 - Cross-Site Request Forgery via SameSite Cookie Attribute
CVSS 4.7
CVE-2025-29722 MEDIUM
Commercify v1.0 - Cross-Site Request Forgery
CVSS 6.3
CVE-2025-28101 MEDIUM
flaskBlog 2.6.1 - Arbitrary File Deletion via Post Title Parameter
CVSS 6.5
CVE-2025-39455 HIGH
IP2Location Variables <2.9.5 - CSRF/XSS
CVSS 7.1
CVE-2025-39453 MEDIUM
algol.plus Advanced Dynamic Pricing for WooCommerce <4.9.3 - CSRF
CVSS 4.3
CVE-2025-39443 MEDIUM
Verge3D <= 4.9.0 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-39442 HIGH
MessageMetric Review Wave - Google Places Reviews <1.4.7 - XSS
CVSS 7.1
CVE-2025-39441 HIGH
Dashboard Notepads <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39440 HIGH
Rajesh Broken Links Remover <1.2.2 - CSRF
CVSS 7.1
CVE-2025-39438 MEDIUM
Theme Changer <= 1.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-39437 MEDIUM
Boone Gorges Anthologize <0.8.3 - CSRF
CVSS 4.3
CVE-2025-39435 HIGH
davidfcarr My Marginalia <1.0.7 - CSRF
CVSS 7.1
CVE-2025-39433 HIGH
Bknewsticker <= 1.0.5 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39431 HIGH
Amazon Showcase WordPress Plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits