WordPress HL Twitter plugin <= 2014.1.18 - Unlink Twitter Account via CSRF vulnerability

Unlink Twitter Account via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin HL Twitter versions = 2014.1.18...

WordPress WooCommerce Customers Manager plugin < 30.1 - Bulk Action via CSRF vulnerability

Bulk Action via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WooCommerce Customers Manager versions 30.1...

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

WordPress Business Card plugin <= 1.0.0 - Arbitrary Card Deletion via CSRF vulnerability

Arbitrary Card Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

Adikiss System Information Announcement System for Online Graduation: Cross-site Request Forgery Vulnerability

Adikiss Sistem Informasi Pengumuman Kelulusan Online is a campus information system developed by Adikiss Corporation. Version 1.0 of Adikiss Sistem Informasi Pengumuman Kelulusan Online contains a cross-site request forgeing vulnerability. This vulnerability stems from the tambahuser.php endpoint...

Naviwebs Navigate CMS Cross-Site Request Forgery Vulnerability

Naviwebs Navigate CMS is an open-source content management system developed by Naviwebs Inc. In the version 2.8.7 of Naviwebs Navigate CMS, there is a cross-site request forgeing vulnerability. This vulnerability stems from the extended upload feature, which allows for cross-site request forgery,...

Sick Beard Cross-Site Request Forgery Vulnerability

Sick Beard is a television program download tool developed by Nic Wolfe personally. Sick Beard has a cross-site request forgeing vulnerability, which stems from improper handling of configuration parameters. This vulnerability may allow cross-site request forgeing attacks to disable authenticatio...

PT-2026-5468

Sickbeard alpha contains a cross-site request forgery vulnerability that allows attackers to disable authentication by submitting crafted configuration parameters. Attackers can trick users into submitting a malicious form that clears web username and password, effectively removing authentication...

PT-2026-5491

Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.8.7 Description Navigate CMS 2.8.7 is susceptible to a cross-site request forgery condition. This allows attackers to upload malicious extensions through a specially crafted HTML page. An attacker can deceive authenticat...

PT-2026-5485

Name of the Vulnerable Software and Affected Versions Sistem Informasi Pengumuman Kelulusan Online version 1.0 Description The application contains a cross-site request forgery condition that permits attackers to add unauthorized admin users. This is achieved by exploiting the tambahuser.php...

PT-2026-5548

CVE-2026-25090 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2026-25090 Published : Jan. 30, 2026, 5:16 a.m. | 3 hours, 9 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

WordPress Light Poll plugin <= 1.0.0 - Polls Deletion via CSRF vulnerability

Polls Deletion via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Light Poll versions = 1.0.0...

WordPress WP MultiTasking plugin <= 0.1.12 - Exit Popup Update via CSRF vulnerability

Exit Popup Update via CSRF vulnerability discovered by Norbert Hofmann in WordPress Plugin WP MultiTasking versions = 0.1.12...

CVE-2025-15550

birkir prime = 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query...

CVE-2025-15550 birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL

birkir prime = 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query...

CVE-2025-15550

CVE-2025-15550 affects birkir prime

CVE-2025-15550 birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL

birkir prime = 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query...

EUVD-2025-206514

birkir prime = 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query...

CVE-2025-14616

The Recooty – Job Widget Old Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing nonce validation on the recootysavemaybe function. This makes it possible for unauthenticated attackers to update the...