CWE-352: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery (CSRF) vulnerability in Mozilla Web Push WordPress plugin allows attackers to inject malicious scripts via stored XSS. Th...

This CSRF vulnerability in the Social Analytics WordPress plugin allows attackers to trick authenticated administrators into executing malicious actio...

This CSRF vulnerability in the WordPress Call me Now plugin allows attackers to trick authenticated administrators into executing malicious actions, l...

This vulnerability in the Mahdi Khaksar mybb Last Topics WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that l...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Anonymize Links plugin allows attackers to perform stored cross-site scripting (XSS...

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in the Free MailClient FMC WordPress plugin that can lead to Stored Cross-Site Sc...

This vulnerability in the DF Draggable WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to Stored Cros...

This CSRF vulnerability in the Flying Twitter Birds WordPress plugin allows attackers to trick authenticated administrators into performing actions th...

A Cross-Site Request Forgery (CSRF) vulnerability in the Kapost WordPress plugin allows attackers to inject malicious scripts that become stored XSS. ...

This vulnerability in the WordPress plugin 'Hack me if you can' allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to Sto...

This CSRF vulnerability in the Book a Place WordPress plugin allows attackers to trick authenticated administrators into executing malicious actions, ...

This CSRF vulnerability in the WordPress Send to Twitter plugin allows attackers to trick authenticated administrators into performing actions that in...

A Cross-Site Request Forgery (CSRF) vulnerability in the Slider for Writers WordPress plugin allows attackers to perform stored cross-site scripting (...

This CSRF vulnerability in the Secure CAPTCHA WordPress plugin allows attackers to trick authenticated administrators into executing actions that inje...

This CSRF vulnerability in the Shabbos and Yom Tov WordPress plugin allows attackers to trick authenticated administrators into performing actions tha...

This vulnerability in the WP Custom Google Search WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to ...

A Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana NV Slider WordPress plugin allows attackers to perform stored cross-site scripting (X...

This vulnerability in the Ryan Sutana WP Panoramio WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to...

This vulnerability in the Real Seguro Viagem WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to Store...

A Cross-Site Request Forgery (CSRF) vulnerability in the Rapid Sort RSV GMaps WordPress plugin allows attackers to perform stored cross-site scripting...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Email on Publish plugin allows attackers to perform stored cross-site scripting (XS...

This CSRF vulnerability in the Import Users to MailChimp WordPress plugin allows attackers to trick authenticated administrators into performing unint...

A Cross-Site Request Forgery (CSRF) vulnerability in the DSmidgy HTTP to HTTPS link changer WordPress plugin allows attackers to inject malicious scri...

This CSRF vulnerability in the Auphonic Importer WordPress plugin allows attackers to trick authenticated administrators into executing malicious acti...

This CSRF vulnerability in the Vinícius Krolow Twitter Post WordPress plugin allows attackers to trick authenticated administrators into executing ma...

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in the Hernan Javier Hegykozi MercadoLibre Integration WordPress plugin that can ...

This CSRF vulnerability in Walter Cerrudo MFPlugin WordPress plugin allows attackers to trick authenticated administrators into performing actions tha...

This CSRF vulnerability in Floatbox Plus WordPress plugin allows attackers to trick authenticated administrators into executing malicious actions, lea...

A Cross-Site Request Forgery (CSRF) vulnerability in the Andrea Brandi Twitter Shortcode WordPress plugin allows attackers to perform stored cross-sit...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Comment-Emailer plugin allows attackers to perform stored cross-site scripting (XSS...

This CSRF vulnerability in the MDC YouTube Downloader WordPress plugin allows attackers to trick authenticated administrators into performing unintend...

This vulnerability in the WordPress Rename Author Slug plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to Store...

This CSRF vulnerability in the Intuitive Design GDReseller WordPress plugin allows attackers to trick authenticated administrators into executing mali...

A CSRF vulnerability in the Kelvin Ng Shortcode in Comment WordPress plugin allows attackers to trick authenticated users into executing malicious act...

This CSRF vulnerability in the UpDownUpDown WordPress plugin allows attackers to trick authenticated users into performing unintended actions, which c...

A Cross-Site Request Forgery (CSRF) vulnerability in the WP Background Tile WordPress plugin allows attackers to perform stored cross-site scripting (...

This CSRF vulnerability in the Word Freshener WordPress plugin allows attackers to trick authenticated administrators into performing actions that inj...

This CSRF vulnerability in the WordPress 'Add Custom Google Tag Manager' plugin allows attackers to trick authenticated administrators into executing ...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin 'Find Your Reps' allows attackers to perform stored cross-site scripting (XS...

A Cross-Site Request Forgery (CSRF) vulnerability in the digfish Geotagged Media WordPress plugin allows attackers to perform actions as authenticated...

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in the MemeOne WordPress plugin that can lead to Stored Cross-Site Scripting (XSS...

This vulnerability in the Web Testimonials WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lead to Stored ...

This vulnerability in the Syed Amir Hussain Custom Post WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that le...

A Cross-Site Request Forgery (CSRF) vulnerability in the WP-BlackCheck WordPress plugin allows attackers to perform actions as authenticated users, le...

A Cross-Site Request Forgery (CSRF) vulnerability in the Joshua Wieczorek Bible Embed WordPress plugin allows attackers to perform stored cross-site s...

A Cross-Site Request Forgery (CSRF) vulnerability in the Adrian Moreno WP Lyrics WordPress plugin allows attackers to perform stored cross-site script...

This vulnerability in the Universal Analytics Injector WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lea...

This CSRF vulnerability in Albdesign Simple Project Manager WordPress plugin allows attackers to trick authenticated administrators into executing mal...

This vulnerability in the Pascal Casier Board Election WordPress plugin allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that lea...

A Cross-Site Request Forgery (CSRF) vulnerability in the SpruceJoy Cookie Consent & Autoblock for GDPR/CCPA WordPress plugin allows attackers to perfo...