CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,336 vulnerabilities with CWE-352
CVE-2025-30612 HIGH
Replace Default Words <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30608 HIGH
Anthony WordPress SQL Backup <3.5.2 - CSRF
CVSS 7.1
CVE-2025-30603 HIGH
DEJAN CopyLink <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30601 MEDIUM
Flipdish Ordering System <1.4.16 - CSRF
CVSS 4.3
CVE-2025-30598 MEDIUM
Link OSS Upload <= 4.8.9 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30588 HIGH
ryan_xantoo Map Contact <3.0.4 - CSRF/XSS
CVSS 7.1
CVE-2025-30587 HIGH
shawfactor LH OGP Meta - Stored XSS
CVSS 7.1
CVE-2025-30586 HIGH
cTabs <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30585 MEDIUM
Generate Post Thumbnails <0.9 - CSRF
CVSS 4.3
CVE-2025-30584 HIGH
AlphaOmega Captcha & Anti-Spam Filter - XSS
CVSS 7.1
CVE-2025-30583 HIGH
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30578 HIGH
hotvanrod AdSense Privacy Policy <1.1.1 - CSRF
CVSS 7.1
CVE-2025-30577 HIGH
mendibass Browser Address Bar Color <3.3 - CSRF
CVSS 7.1
CVE-2025-30576 MEDIUM
HuangYe WuDeng Hacklog Remote Image Autosave - CSRF
CVSS 4.3
CVE-2025-30572 HIGH
Igor Yavych Simple Rating <1.4 - CSRF
CVSS 7.1
CVE-2025-30568 MEDIUM
hitoy Super Static Cache <3.3.5 - CSRF
CVSS 4.3
CVE-2025-30565 HIGH
karrikas banner-manager <16.04.19 - CSRF
CVSS 7.1
CVE-2025-30564 HIGH
wpwox Custom Script Integration <2.1 - CSRF
CVSS 7.1
CVE-2025-30561 HIGH
CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30560 HIGH
Sana Ullah jQuery Dropdown Menu <3.0 - CSRF
CVSS 7.1
CVE-2025-30558 HIGH
EnzoCostantini55 ANAC XML Render -<1.5.7 - CSRF
CVSS 7.1
CVE-2025-30557 MEDIUM
Easy 301 Redirects <= 1.33 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30556 MEDIUM
Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-30555 HIGH
WordPres <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-30552 HIGH
WordPress Admin Bar Improved <3.3.5 - CSRF
CVSS 7.1
Details
Vulnerabilities 9,336
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits