CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,328 vulnerabilities with CWE-352
CVE-2025-31583 HIGH
Ashish Ajani WP Copy Media URL -n/a-2.1 - XSS
CVSS 7.1
CVE-2025-31572 MEDIUM
Multi Days Events and Multi Events in One Day Calendar <1.1.3 - CSRF
CVSS 4.3
CVE-2025-31570 HIGH
wp-buy Related Posts Widget with Thumbnails <1.2 - CSRF/XSS
CVSS 7.1
CVE-2025-31569 HIGH
WordPress Related Posts with Thumbnails < 3.0.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31566 HIGH
Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31410 MEDIUM
Ashish Ajani WP Church Donation - CSRF
CVSS 4.3
CVE-2025-31010 MEDIUM
ReichertBrothers SimplyRETS Real Estate IDX - CSRF
CVSS 4.3
CVE-2025-2863 HIGH
saTECH BCU Firmware 2.1.3 - Cross-Site Request Forgery
CVSS 7.8
CVE-2025-31474 MEDIUM
WP Database Optimizer <1.2.1.3 - CSRF
CVSS 4.3
CVE-2025-31460 HIGH
OmniLeads Scripts and Tags Manager <1.4 - CSRF
CVSS 7.1
CVE-2025-31459 HIGH
PasqualePuzio Login Alert <0.2.1 - XSS
CVSS 7.1
CVE-2025-31458 HIGH
Forsgren Video Embedder <1.7.1 - CSRF
CVSS 7.1
CVE-2025-31457 MEDIUM
LWS SMS <= 2.4.1 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-31456 MEDIUM
bsndev Ultimate Security Checker <4.2 - CSRF
CVSS 4.3
CVE-2025-31449 HIGH
EricH The Visitor Counter <1.4.3 - CSRF
CVSS 7.1
CVE-2025-31448 MEDIUM
misteraon Simple Trackback Disabler - CSRF
CVSS 5.4
CVE-2025-31447 MEDIUM
NertWorks All in One Social Share Tools - CSRF
CVSS 5.4
CVE-2025-31444 HIGH
youtag ShowTime Slideshow <1.6 - XSS
CVSS 7.1
CVE-2025-31443 HIGH
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-31440 HIGH
Strategy11 Team Terms of Use <2.0 - CSRF
CVSS 7.1
CVE-2025-31439 MEDIUM
tobias_ MerZ Browser Caching <n/a - CSRF
CVSS 5.4
CVE-2025-31438 MEDIUM
WP Supersized <= 3.1.6 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-31435 HIGH
Efficient Scripts Microblog Poster <2.1.6 - CSRF
CVSS 7.1
CVE-2025-31079 MEDIUM
Usermaven <= 1.2.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-1762 MEDIUM
Event Tickets with Ticket Scanner < 2.5.4 - Cross-Site Request Forgery in Settings Update
CVSS 4.3
Details
Vulnerabilities 9,328
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits