CWE-352: Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Also known as Session Riding, Cross Site Reference Forgery, XSRF.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- jayce53 easyindexWordPress EasyIndex plugin <= 1.1.1704 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- rick beckman openhookWordPress OpenHook plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- zoho mail zeptomailWordPress Zoho ZeptoMail plugin <= 3.3.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- everestthemes everest backupWordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- merzedes custom styleWordPress Custom Style plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- marcin kijak noindex by pathWordPress Noindex by Path plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- page carbajal custom post statusWordPress Custom Post Status plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- mindstien technologies recent posts from each categoryWordPress Recent Posts From Each Category plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- socialprofilr social profilrWordPress Social Profilr plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- rene ade sensitivetagcloudWordPress SensitiveTagCloud plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- mg12 wp-easyarchivesWordPress WP-EasyArchives plugin <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- peterwsterling simple archive generatorWordPress Simple Archive Generator plugin <= 5.2 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- eleopard behance portfolio managerWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- hoernerfranz wp-caldav2icsWordPress WP-CalDav2ICS plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- jm-data onu jf511-tv, jm-data onu jf511-tv firmware +1 moreJM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability5.1 Medium
- conoha by gmo wing wordpress migratorWordPress WING WordPress Migrator plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability9.6 Critical
- merv barrett import into easy property listingsWordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ays pro popup boxWordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- heateor support social loginWordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src...8.8 High
- etlsystems c0401d1uia-22476 firmware, c0401d1ula-22419 firmware, c0401d1ula-22456 firmware +24 more +26 moreThe web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution...6.5 Medium
- kyocera net adminKYOCERA Net Admin 3.4.0906 Cross-Site Request Forgery via User Administration5.1 Medium
- teradek vidiu pro, vidiu firmware, vidiu mini firmware +1 more +3 moreTeradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change5.1 Medium
- devolo ag dlan 550 duo+ starter kitDevolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery5.1 Medium
- beward n100 h.264 vga ip cameraBeward N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Vulnerability5.1 Medium
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface5.1 Medium
- guangzhou v-solution electronic technology co., ltd. sol gpon/epon olt platformV-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability5.1 Medium
- carlo gavazzi ab smarthouse webappCarlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS5.1 Medium
- ave s.p.a. dominaplusAVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS Vulnerabilities5.1 Medium
- cube-js cube, teradek cube firmware +1 moreTeradek Cube 7.3.6 Cross-Site Request Forgery Password Change5.1 Medium
- teradek, llc slice, teradek slice firmware +1 moreTeradek Slice 7.3.15 Cross-Site Request Forgery via Password Change5.1 Medium
- ecessa corporation edge ev150Ecessa Edge EV150 10.7.4 Cross-Site Request Forgery via User Configuration5.1 Medium
- ecessa corporation wanworx wvr-30Ecessa WANWorx WVR-30 < 10.7.4 Cross-Site Request Forgery via User Configuration5.1 Medium
- ecessa corporation shieldlink sl175ehqEcessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request Forgery via User Configuration5.1 Medium
- microhard systems 3g/4g cellular ethernet and serial gateway csrf vulnerabilities, microhardcorp bullet-3g firmware, bullet-lte firmware +9 more +11 moreMicrohard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface5.1 Medium
- synaccess networks inc. netbooter np-0801duSynaccess netBooter NP-0801DU 7.4 Cross-Site Request Forgery via Admin Interface5.1 Medium
- soca technology co., ltd access control systemSOCA Access Control System 180612 Cross-Site Request Forgery via Admin Interface5.1 Medium
- rustaurius five star restaurant reservationsWordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- constantin boiangiu vimeothequeWordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tikweb management fast user switchingWordPress Fast User Switching plugin <= 1.4.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pluginsware advanced classifieds & directory proWordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- alessandro piconi simple keyword to linkWordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- tmtraderunner trade runnerWordPress Trade Runner plugin <= 3.14 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- titopandub evergreen post tweeterWordPress Evergreen Post Tweeter plugin <= 1.8.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- rhys wynne wp email captureWordPress WP Email Capture plugin <= 3.12.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- axesstmc zucchetti axess cloki access controlZucchetti Axess CLOKI Access Control 1.64 Cross-Site Request Forgery5.1 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'4.3 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery5.1 Medium
- Show moreLoading…