CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,336 vulnerabilities with CWE-352
CVE-2025-30842 MEDIUM
Christmas Panda <= 1.0.4 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30833 MEDIUM
Verge3D <= 4.8.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30823 MEDIUM
Boone Gorges Anthologize <0.8.2 - CSRF
CVSS 4.3
CVE-2025-30822 MEDIUM
Hakik Zaman Custom Login Logo <1.1.7 - CSRF
CVSS 4.3
CVE-2025-30816 MEDIUM
Nks publish post email notification <1.0.2.3 - CSRF
CVSS 4.3
CVE-2025-30815 MEDIUM
Hesabfa Accounting <= 2.1.8 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30811 MEDIUM
Javier Revilla ValidateCertify - CSRF
CVSS 4.3
CVE-2025-30805 MEDIUM
wpdesk Flexible Cookies <1.1.8 - CSRF
CVSS 4.3
CVE-2025-30804 MEDIUM
maennchen1.de wpShopGermany IT-RECHT KANZLEI - CSRF
CVSS 4.3
CVE-2025-30801 MEDIUM
TWB Woocommerce Reviews <1.7.7 - CSRF
CVSS 4.3
CVE-2025-30788 HIGH
Eli EZ SQL Reports <5.25.08 - CSRF/SQL Injection
CVSS 8.2
CVE-2025-30787 HIGH
EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.08 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30783 HIGH
WP Google Review Slider <16.0 - CSRF
CVSS 8.2
CVE-2025-30769 HIGH
WIP WooCarousel Lite <= 1.1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30764 MEDIUM
AntoineH Football Pool <2.12.2 - CSRF
CVSS 4.3
CVE-2025-2832 MEDIUM
mingyuefusu tushuguanlixitong - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-20228 MEDIUM
Splunk <9.3.3, <9.2.5, <9.1.8 - CSRF
CVSS 6.5
CVE-2025-2319 HIGH
WordPress EZ SQL Reports <5.25.08 - CSRF
CVSS 8.8
CVE-2025-1320 MEDIUM
teachPress <= 9.0.9 - Cross-Site Request Forgery via Import Page
CVSS 4.3
CVE-2025-1798 MEDIUM
Italia Design Comuni Italia <= 1.1.2 - Stored Cross-Site Scripting
CVSS 6.1
CVE-2025-30621 HIGH
kornelly Translator <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30620 HIGH
coderscom WP Odoo Form Integrator <1.1.0 - CSRF
CVSS 7.1
CVE-2025-30619 MEDIUM
SpeakPipe <= 0.2 - Cross-Site Request Forgery
CVSS 5.4
CVE-2025-30617 MEDIUM
Rewrite <= 0.2.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30615 CRITICAL
WP e-Commerce Style Email <0.6.2 - CSRF
CVSS 9.6
Details
Vulnerabilities 9,336
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits