CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,322 vulnerabilities with CWE-352
CVE-2025-31390 HIGH
Social Crowd <= 0.9.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31388 HIGH
The World <= 0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31385 HIGH
Site Table of Contents <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31383 HIGH
FrescoChat Live Chat <= 3.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31382 HIGH
theode Language Field <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31375 HIGH
bhoogterp Scheduled <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31038 HIGH
Essential Breadcrumbs <1.1.1 - CSRF/Privilege Escalation
CVSS 8.8
CVE-2025-31036 HIGH
WPSolr <24.0 - CSRF/Privilege Escalation
CVSS 8.8
CVE-2025-31034 MEDIUM
AboZain Albanna Customize Login Page - CSRF
CVSS 4.3
CVE-2025-31033 CRITICAL
Buddypress Humanity <= 1.2 - Cross-Site Request Forgery
CVSS 9.8
CVE-2025-31032 HIGH
Pagopar WooCommerce Gateway <2.7.1 - CSRF
CVSS 7.1
CVE-2025-31026 HIGH
Comment Validation Reloaded <0.5 - CSRF
CVSS 7.1
CVE-2025-31023 HIGH
Purab Seo Meta Tags <= 1.4 - Cross-Site Request Forgery
CVSS 8.8
CVE-2025-31005 MEDIUM
Easyfonts <= 1.1.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-25056 MEDIUM
Inaba Denki Sangyo AC-WPS-11ac series < 2.0.03P - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-27189 MEDIUM
Adobe Commerce < 2.4.8-beta2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-3064 HIGH
WPFront User Role Editor <4.2.1 - CSRF
CVSS 8.8
CVE-2025-0810 HIGH
Read More & Accordion plugin <3.4.5 - CSRF
CVSS 7.5
CVE-2025-3257 MEDIUM
xujiangfei admintwo 1.0 - Cross-Site Request Forgery via /user/updateSet
CVSS 4.3
CVE-2025-32280 MEDIUM
WP Project Manager < 2.6.25 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-32278 MEDIUM
Table Block by RioVizual <= 2.3.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-32276 MEDIUM
Administrator Z <=2025.03.04 - CSRF
CVSS 4.3
CVE-2025-32274 MEDIUM
WP w3all phpBB <= 2.9.8 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-32273 MEDIUM
Freetobook Responsive Widget - CSRF
CVSS 4.3
CVE-2025-32272 MEDIUM
PickPlugins Wishlist <1.0.44 - CSRF
CVSS 4.3
Details
Vulnerabilities 9,322
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits