EUVD-2026-54302

The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to reuse a single valid...

Scada-LTS CSRF

The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform CSRF attacks...

XWiki Platform Request Forgery

The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a malicious actor to substitute the displayed URL with another one...

Airflow CSRF

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

Acronis Cyber Protect Data Protection Data Compromise Bypass

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

Symfony CSRF

The vulnerability of the Symfony software platform for developing and managing web applications is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

Jenkins OpenShift Deployer Plugin Arbitrary Action

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device b...

Cisco IOS Cross-site Forgery

The vulnerability in Cisco IOS XE and Cisco IOS web interfaces is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests remotely...

Cisco Adaptive Security Appliance Code Execution

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using...