CWE-352: Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Also known as Session Riding, Cross Site Reference Forgery, XSRF.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- telepedia tableprogresstrackingTableProgressTracking's missing CSRF protection allows unauthorized state changes3.5 Low
- ubicod co., ltd. | medivision inc. medivision digital signage, medivision digital signage firmware +1 moreUBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management8.6 High
- all-dynamics digital signage systemAll-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management8.6 High
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Cross-Site Request Forgery via User Creation6.9 Medium
- 1panel-dev 1panel1Panel CSRF Web Port Configuration Change7.0 High
- 1panel-dev 1panel1Panel CSRF Panel Name Modification5.1 Medium
- acquia content hub, drupal acquia content hub +1 moreAcquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-1258.1 High
- jenkinsJenkins has a CSRF vulnerability on the login form3.5 Low
- 1panel-dev 1panel1Panel CSRF in Change Username Functionality Allows Account Lockout7.0 High
- selea targa ip ocr-anpr camera, carplateserver, izero box full firmware +10 more +12 moreSelea Targa IP Camera Cross-Site Request Forgery via Admin Creation8.5 High
- stvs provisionSTVS ProVision Cross-Site Request Forgery (Add Admin)6.9 Medium
- open bmcs openbmcsOpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php5.3 Medium
- maartenbelmans advanced product fields (product addons) for woocommerceAdvanced Product Fields (Product Addons) for WooCommerce <= 1.6.17 - Cross-Site Request Forgery to Product Field Group Duplication and Publication4.3 Medium
- taylor hawkes wp fast cacheWordPress WP Fast Cache plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- stellarwp givewpWordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- hogash kallyasWordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saad iqbal new user approveWordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- flashyapp wp flashy marketing automationWordPress WP Flashy Marketing Automation plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jk social photo fetcherWordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- alex prokopenko / justcoded just tinymce custom stylesWordPress Just TinyMCE Custom Styles plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- valerio monti auto alt textWordPress Auto Alt Text plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- photoboxone smtp mailWordPress SMTP Mail plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saifumak add custom codesWordPress Add Custom Codes plugin <= 4.80 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- m.code media library downloaderWordPress Media Library Downloader plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- proteusthemes custom sidebars by proteusthemesWordPress Custom Sidebars by ProteusThemes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpmediadownload media library file downloadWordPress Media Library File Download plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- apasionados dofollow case by caseWordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- badi jones duplicate content cureWordPress Duplicate Content Cure plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- valentin agachi create posts & termsWordPress Create Posts & Terms plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- jupitercow wp sifrWordPress WP sIFR plugin <= 0.6.8.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- alex furr pdf creator liteWordPress PDF Creator Lite plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- psm plugins supportcandyWordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- strategy11 team business directoryWordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ays pro quiz makerWordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- stiofan userswpWordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jegtheme jnews paywallWordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rustaurius ultimate faqWordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jacques malgrange rencontreWordPress Rencontre plugin <= 3.13.7 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- codeworkweb cww companionWordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saad iqbal quick contact formWordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- kubiq pdf thumbnail generatorWordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- quantumcloud simple link directoryWordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ays pro chartifyWordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- presstigers simple folioWordPress Simple Folio plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- personal project paniluxCSRF in Panilux9.6 Critical
- allskyteam allskyCross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote...8.8 High
- enalean tuleapTuleap has missing CSRF protections its in tracker field dependencies4.6 Medium
- Show moreLoading…