Lucene search
+L

10562 matches found

Positive Technologies
Positive Technologies
•added 2025/06/04 12:00 a.m.•24 views

PT-2025-23761 · WordPress · Filterprovider

Name of the Vulnerable Software and Affected Versions: File Provider versions 1.2.3 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the File Provider WordPress plugin. This could allow attackers to make a logged-in admin change the settings via ...

4.3CVSS5.3AI score0.00164EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/06/02 12:00 a.m.•22 views

PT-2025-23556 · Cimatti · Contact Forms By Cimatti

Name of the Vulnerable Software and Affected Versions: Contact Forms by Cimatti versions 1.9.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's behalf. This can be achieved by tricking the...

4.3CVSS4.4AI score0.00136EPSS
SaveExploits0References5
osv_bit
osv_bit
•added 2025/05/31 5:57 a.m.•25 views

BIT-MOODLE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF...

8.8CVSS6.6AI score0.00353EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•18 views

WordPress plugin Simple Page Access Restriction 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.5CVSS6.1AI score0.0022EPSS
SaveExploits0References6
NVD
NVD
•added 2025/05/27 4:15 a.m.•24 views

CVE-2025-26211

Gibbon before 29.0.00 allows CSRF...

8.8CVSS0.0018EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/25 1:19 p.m.•22 views

CVE-2025-46458

Cross-Site Request Forgery CSRF vulnerability in x000x occupancyplan occupancyplan allows SQL Injection.This issue affects occupancyplan: from n/a through = 1.0.3.0...

8.2CVSS7.3AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/23 12:43 p.m.•36 views

CVE-2025-46458 WordPress occupancyplan plugin <= 1.0.3.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in x000x occupancyplan occupancyplan allows SQL Injection.This issue affects occupancyplan: from n/a through = 1.0.3.0...

8.2CVSS0.00181EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:00 p.m.•18 views

CVE-2025-23765

Cross-Site Request Forgery CSRF vulnerability in w3speedster W3SPEEDSTER w3speedster-wp allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through = 7.33...

4.3CVSS7.2AI score0.00223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:00 p.m.•36 views

CVE-2025-24572

Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.78.258...

6.5CVSS5.9AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:43 a.m.•16 views

CVE-2025-24712

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme Radius Blocks radius-blocks allows Cross Site Request Forgery.This issue affects Radius Blocks: from n/a through = 2.1.2...

5.4CVSS7.2AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:42 a.m.•17 views

CVE-2025-22297

Cross-Site Request Forgery CSRF vulnerability in aipost AI WP Writer ai-wp-writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through = 3.8.4.4...

4.3CVSS7.2AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:40 a.m.•18 views

CVE-2025-24742

Cross-Site Request Forgery CSRF vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.40...

8.8CVSS7.2AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:39 a.m.•19 views

CVE-2025-24717

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Modal Window modal-window allows Cross Site Request Forgery.This issue affects Modal Window: from n/a through = 6.1.4...

8.8CVSS7.2AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:39 a.m.•21 views

CVE-2025-24720

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Sticky Buttons sticky-buttons allows Cross Site Request Forgery.This issue affects Sticky Buttons: from n/a through = 4.1.1...

5.4CVSS7.2AI score0.00189EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:36 a.m.•23 views

CVE-2025-22731

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from n/a through = 1.0...

4.3CVSS7.2AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:49 a.m.•19 views

CVE-2024-43295

Cross-Site Request Forgery CSRF vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data Access: from n/a through 5.5.7...

4.3CVSS7AI score0.00183EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 10:48 a.m.•17 views

CVE-2024-49274

Cross-Site Request Forgery CSRF vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD Infomaniak: from n/a through = 1.5.7...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:45 a.m.•27 views

CVE-2024-48913

Hono, a web framework, prior to version 4.6.5 is vulnerable to bypass of cross-site request forgery CSRF middleware by a request without Content-Type header. Although the CSRF middleware verifies the Content-Type Header, Hono always considers a request without a Content-Type header to be safe. Th...

5.9CVSS7AI score0.00325EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:29 a.m.•37 views

CVE-2024-42608

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/submitpage.php...

8.8CVSS7.5AI score0.00295EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:26 a.m.•20 views

CVE-2024-42629

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...

8.8CVSS7.6AI score0.00225EPSS
SaveExploits1References1
Rows per page
Query Builder