CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,337 vulnerabilities with CWE-352
CVE-2025-23445 HIGH
Scott Swezey Easy Tynt <0.2.5.1 - CSRF
CVSS 7.1
CVE-2025-23442 HIGH
Shockingly Big IE6 Warning <1.6.3 - CSRF
CVSS 7.1
CVE-2025-23436 HIGH
Wp-Scribd-List <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-23435 HIGH
David Marcucci Password Protect Plugin <0.8.1.0 - CSRF
CVSS 7.1
CVE-2025-23430 HIGH
Oren Yomtov Mass Custom Fields Manager - CSRF
CVSS 7.1
CVE-2025-23426 HIGH
Wizcrew Technologies go Social - CSRF
CVSS 7.1
CVE-2025-23424 HIGH
Marquee Style RSS News Ticker <3.2.0 - CSRF
CVSS 7.1
CVE-2025-22784 HIGH
Background Control <=1.0.5 - CSRF & Path Traversal
CVSS 8.6
CVE-2025-22731 MEDIUM
silverplugins217 - WooCommerce - CSRF
CVSS 4.3
CVE-2025-21193 MEDIUM
Windows Server 2016, 2019, 2022, 2022 23H2, 2025 - Active Directory Federation Server Spoofing
CVSS 6.5
CVE-2025-23081 MEDIUM
MediaWiki DataTransfer Extension 1.39.0-1.39.10, 1.41.0-1.41.2, 1.42.0-1.42.1 - CSRF and XSS
CVSS 6.1
CVE-2025-0393 MEDIUM
Royal Elementor Addons & Templates <1.7.1006 - CSRF
CVSS 6.1
CVE-2025-22963 HIGH
Teedy <= 1.11 - Cross-Site Request Forgery via POST /api/user/admin
CVSS 7.5
CVE-2025-23113 LOW
REDCap 14.9.6 - Cross-Site Request Forgery via Alert-Title CSV Upload
CVSS 3.4
CVE-2025-22814 HIGH
Zephyr Admin Theme <= 1.4.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-22590 HIGH
Prayer Times Anywhere <2.0.1 - CSRF
CVSS 7.1
CVE-2025-22589 HIGH
Quote Tweet <= 0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-22582 HIGH
Scott Nell Uptime Robot <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVSS 7.1
CVE-2025-22571 HIGH
Instabot <= 1.10 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-22563 MEDIUM
Pretty Url <= 1.5.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-22562 MEDIUM
Jason Funk Title Experiments Free - CSRF
CVSS 4.3
CVE-2025-22559 HIGH
TubePress.NET <= 4.0.1 - Cross-Site Request Forgery
CVSS 7.1
CVE-2025-22557 HIGH
WPMagic News Publisher Autopilot <2.1.4 - CSRF
CVSS 7.1
CVE-2025-22556 HIGH
Norse Rune Oracle Plugin <1.4.1 - CSRF
CVSS 7.1
CVE-2025-22555 HIGH
Smoothness Slider Shortcode <v1.2.2 - CSRF
CVSS 7.1
Details
Vulnerabilities 9,337
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits