CVE-2026-65471

The CVE-2026-65471 entry concerns unauthenticated Cross Site Request Forgery (CSRF) in the WordPress Avada Core plugin

CVE-2026-65464

The CVE-2026-65464 entry describes an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in the WordPress GiveWP plugin, affecting versions up to 4.16.3. The available documents identify the vulnerability as CSRF but do not provide details on the affected files/components, root cause...

EUVD-2026-48076

Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...

EUVD-2026-48224

Unauthenticated Cross Site Request Forgery CSRF in Zarinpal Gateway = 5.1.0 versions...

CVE-2026-65460

CVE-2026-65460 affects the WordPress Zarinpal Gateway plugin (≤ 5.1.0). The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in versions ≤ 5.1.0. Attack context: network access required, with user interaction necessary for exploitation; impact details are not expanded b...

CVE-2026-61981

CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...

EUVD-2026-48213

Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...

CVE-2026-57785

The CVE concerns the WordPress ApusListing theme (versions <= 1.2.63) with an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The available data specify the affected product (ApusListing), the vulnerable version range (

EUVD-2026-48181

Unauthenticated Cross Site Request Forgery CSRF in Ninja Forms File Uploads Extension = 3.3.26 versions...

CVE-2026-57784

CVE-2026-57784 : Unauthenticated Cross Site Request Forgery (CSRF) in the WordPress plugin Ninja Forms File Uploads Extension

EUVD-2026-48143

Unauthenticated Cross Site Request Forgery CSRF in WP Accessibility Helper WAH = 0.6.6 versions...

CVE-2026-24537

CVE-2026-24537 — Unauthenticated Cross Site Request Forgery (CSRF) in the WordPress plugin WP Accessibility Helper (WAH) , versions

CVE-2026-64871 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...

CVE-2026-65757 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-64876

CVE-2026-64876 affects the Joomla extension from regularlabs.com, specifically the GeoIP extension. The issue arises from inconsistent CSRF token checks and privilege checks, causing database-update requests to lack consistent token validation and Super User checks. This could permit unauthorized...

Cisco IOS 12.4 HTTP Server Cross-Site Request Forgery (CVE-2008-4128)

According to its self-reported version, Cisco IOS 12.4 is affected by multiple cross-site request forgery CSRF vulnerabilities in the HTTP administration component. An unauthenticated, remote attacker can exploit these by persuading an authenticated user to follow a malicious link, allowing...

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

CVE-2026-63265

CVE-2026-63265 affects Joomla via Regular Labs extension. The issue: inconsistent CSRF token checks and privilege checks on multiple Regular Labs AJAX endpoints. This allowed authenticated low-privilege users or CSRF attackers to perform lookups or mutations outside their authorization. Exploitat...

EUVD-2026-47814

Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization...

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...