CVE-2026-111906

phpMyFAQ versions prior to 4.1.9 and 4.2.0-alpha before 4.2.0-beta are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the Elasticsearch and OpenSearch administration API endpoints because they fail to validate CSRF tokens for create , drop , and import actions...

CVE-2026-111906 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...

CVE-2026-111906 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...

EUVD-2026-103333

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig 2FA removal endpoint, allowing authenticated attackers to guess TOTP codes without limit. Attackers holding a hijacked session and CSRF token can repeatedly POST guesses to...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2025-26206

CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 -critical.svg -blue.svg A critical Cross-Site Request Forgery CSRF vulnerability in Selldone Storefront v1.0 allows remote attackers to escalate privileges by tricking authenticated users into executing state-changing...

CVE-2023-45992

CVE-2023-45992 A vulnerability in Ruckus CloudPath 5.12 build 5538 or before could allows a remote unauthenticated attacker to obtain full administrator privileges by leveraging Stored Cross-Site Scripting and Cross-Site Request Forgery Vulnerability using a crafted script. On 16 Oct 2023, the...

refreshing-soap-exploit

This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. The vulnerability The core vulnerability is a cross-site request forgery in F5 Big-IP's SOAP interface,...

CVE-2021-32156

..| CSRF to RCE CRON |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2025-66683

CVE-2025-66683 A Cross-Site Request Forgery CSRF vulnerability exists in the administrator profile update functionality of CarRentalMS v2.0. The affected endpoint does not implement anti-CSRF protections, allowing an attacker to perform unauthorized profile modifications on behalf of an...

CVE-2023-43149

CVE-2023-43149 Author : Aitor Herrero Fuentes Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/admin Version: 1.9.0.3 Tested on: Windows 10 Pro CSRF ADD ROOT ACCOUNT Cross Site Request Forgery vulnerability in application demo.spa-cart.com allows a...

CVE-2019-9202

CVE-2019-9202 Nagios IM 2.6 remote code execution exploit: CSRF + SQLi + RCE + LPE -- remote root Description By chaining a Cross-Site Request Forgery CSRF / authorization bypass CVE-2019-9203 it is possible to exploit a Union-based SQL injection CVE-2019-9204, a Remote Code Execution RCE...

CVE-2026-92433

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...

CVE-2026-106470

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...

EUVD-2026-103256

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...

CVE-2026-106470

The WP Data Access WordPress plugin version before 5.5.88 is vulnerable to a Server-Side Request Forgery (SSRF) due to a lack of authorisation and CSRF checks in one of its actions. This flaw allows any authenticated user , such as a subscriber, to force the server to open connections to arbitrar...

CVE-2026-106470 WP Data Access < 5.5.88 - Subscriber+ SSRF

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...

CVE-2026-106470 WP Data Access < 5.5.88 - Subscriber+ SSRF

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome...

CVE-2026-92433 Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...

CVE-2026-92433

The Patreon WordPress plugin version before 1.10.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw because it fails to verify a nonce during the account connection process. An attacker can leverage this to trick a logged-in administrator into re-linking the site's Patreon integration to...