CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-39430 HIGH
Alexander Rauscha mLanguage <= 1.6.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-39426 MEDIUM
illow - Cookies Consent <0.2.0 - CSRF
CVSS 4.3
CVE-2025-39425 MEDIUM
Pixelgrade Style Manager <2.2.7 - CSRF
CVSS 4.3
CVE-2025-39424 HIGH
Simple Maps <= 0.98 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39423 HIGH
Jenst Add to Header <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39422 HIGH
PResponsive WP Social Bookmarking <3.6 - CSRF
CVSS 7.1
CVE-2025-39421 HIGH
Mustafa KUCUK WP Sticky Side Buttons - Stored XSS
CVSS 7.1
CVE-2025-39419 HIGH
Revision Diet <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39418 HIGH
RSS Manager <= 0.06 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39417 HIGH
Redirect wordpress to welcome or landing page <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39416 HIGH
Ichi translit it! <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-39415 HIGH
Jayesh Parejiya Social Media Links <1.0.4 - CSRF
CVSS 7.1
CVE-2025-39414 HIGH
spam-stopper <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-32655 HIGH
DevriX Restrict User Registration <1.0.1 - CSRF
CVSS 7.1
CVE-2025-32606 HIGH
Listings for Buildium <= 0.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-32546 HIGH
gtlwpdev All push notification for WP <1.5.3 - CSRF
CVSS 7.1
CVE-2025-32545 HIGH
SOFTAGON WooCommerce <0.1 - CSRF/XSS
CVSS 7.1
CVE-2025-39472 MEDIUM
WooCommerce Social Login < 2.8.3 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-39601 CRITICAL
WPFactory Custom CSS, JS & PHP <2.4.1 - CSRF
CVSS 9.6
CVE-2025-39600 MEDIUM
Integration for WooCommerce and QuickBooks < 1.3.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-39593 MEDIUM
Ever Accounting <= 2.1.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-39564 MEDIUM
WP Trio Conditional Shipping <3.4.0 - CSRF
CVSS 6.5
CVE-2025-39563 MEDIUM
WP Trio Conditional Payments <3.3.0 - CSRF
CVSS 6.5
CVE-2025-39548 HIGH
A WP Life Right Click Disable OR Ban <1.1.17 - CSRF
CVSS 7.1
CVE-2025-39547 HIGH
Toast Plugins Internal Link Optimiser <5.1.3 - XSS
CVSS 7.1
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits