CWE-352: Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Also known as Session Riding, Cross Site Reference Forgery, XSRF.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- flexense disk pulse enterprise, sync breeze enterprise server, diskpulse +1 more +3 moreCross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.5 High
- flexense disk pulse enterprise, sync breeze enterprise server, diskpulse +1 more +3 moreCross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.5 High
- chrisnowak change wp urlChange WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update4.3 Medium
- recooty – job widget (old dashboard)Recooty <= 1.0.6 - Cross-Site Request Forgery to Settings Update4.3 Medium
- lxicon bitcoin donate buttonBitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update4.3 Medium
- hu chao imwptipimwptip <= 1.1 - Cross-Site Request Forgery to Settings Update4.3 Medium
- mozilla thunderbirdCSS-based exfiltration of the content from partially encrypted emails when allowing remote content4.3 Medium
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreCross-Site Request Forgery in EZCast Pro II Dongle6.8 Medium
- linuxfoundation sigstore-pythonsigstore has CSRF possibility in OIDC authentication during signing0.0 None
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 Missing CSRF Protections for Administrative Actions5.1 Medium
- devsoftbaltic surveyjs: drag & drop form builderSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning4.3 Medium
- devsoftbaltic surveyjs: drag & drop form builderSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming4.3 Medium
- mainichiweb friendly functions for welcartFriendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings Update4.3 Medium
- devsoftbaltic surveyjs: drag & drop form builderSurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation4.3 Medium
- rtowebsites adminquickbarAdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to Settings Update4.3 Medium
- hallsofmontezuma moderate selected postsModerate Selected Posts <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update4.3 Medium
- zero1zerouk login page editorLogin Page Editor <= 1.2 - Cross-Site Request Forgery to Settings Update4.3 Medium
- sauravrox set bulk post categoriesSet Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update4.3 Medium
- teamzt zt captchaZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Settings Update4.3 Medium
- bramdnl star review managerStar Review Manager <= 1.2.2 - Cross-Site Request Forgery to Settings Update4.3 Medium
- waqasvickey0071 wp youtube video galleryWP Youtube Video Gallery <= 1.0 - Cross-Site Request Forgery to Plugin Settings Update4.3 Medium
- adzbierajewski alex user counterAlex User Counter <= 6.0 - Cross-Site Request Forgery to Settings Update4.3 Medium
- stefanristic simple crypto shortcodesSimple Crypto Shortcodes <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update4.3 Medium
- marynixie related posts thumbnails plugin for wordpressWordPress Related Posts Thumbnails plugin for WordPress plugin <= 4.3.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- paolo geodirectoryWordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- john james jacoby wp term orderWordPress WP Term Order plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- timur kamaev kama thumbnailWordPress Kama Thumbnail plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- aa-team wordpress movies bulk importerWordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- launchinteractive merge + minify + refreshWordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- storeapps stock manager for woocommerceWordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- winkm89 teachpressWordPress teachPress plugin <= 9.0.12 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- richardevcom add polylang support for customizerWordPress Add Polylang support for Customizer plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- mikado-themes pawfriends - pet shop and veterinary wordpress themeWordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- aa-team searchazonWordPress SearchAzon plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- gregmolnar simple xml sitemapWordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- angel costa wp seo searchWordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bdthemes element pack elementor addonsWordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- phpgurukul online course registrationPHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on...6.5 Medium
- get-simple getsimplecms, getsimple cms custom js plugin +1 moreGetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE8.5 High
- getsimple cms my smtp contact plugin, get-simple getsimplecms +1 moreGetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF5.1 Medium
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.3.5 Low
- satollo newsletter – send awesome emails from wordpressNewsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription4.3 Medium
- isaacs node-tar, tar, red hat confidential compute attestation +37 more +39 morenode-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS8.8 High
- birkir primebirkir prime cross-site request forgery5.3 Medium
- technical-laohu mpaytechnical-laohu mpay cross-site request forgery5.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System cross-site request forgery5.3 Medium
- phpgurukul news portalPHPGurukul News Portal cross-site request forgery5.3 Medium
- ubeeinteractive ubee evw327Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)5.1 Medium
- smings leav last email address validatorLEAV Last Email Address Validator <= 1.7.1 - Cross-Site Request Forgery to Plugin Settings Update4.3 Medium
- Show moreLoading…