22806 matches found
CVE-2023-52120
Cross-Site Request Forgery CSRF vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.2...
CVE-2023-52149
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Floating Button.This issue affects Floating Button: from n/a through 6.0...
CVE-2023-52226
Cross-Site Request Forgery CSRF vulnerability in Advanced Flamingo.This issue affects Advanced Flamingo: from n/a through 1.0...
CVE-2023-34025
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...
CVE-2023-34169
Cross-Site Request Forgery CSRF vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin = 3.1.2 versions...
CVE-2023-34031
Cross-Site Request Forgery CSRF vulnerability in Pascal Casier bbPress Toolkit plugin = 1.0.12 versions...
CVE-2023-34002
Cross-Site Request Forgery CSRF vulnerability in WP Inventory Manager plugin = 2.1.0.13 versions...
CVE-2023-30478
Cross-Site Request Forgery CSRF vulnerability in Tribulant Newsletters plugin = 4.8.8 versions...
CVE-2023-52145
Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Republish Old Posts.This issue affects Republish Old Posts: from n/a through 1.21...
CVE-2023-30484
Cross-Site Request Forgery CSRF vulnerability in uPress Enable Accessibility plugin = 1.4 versions...
CVE-2023-47670
Cross-Site Request Forgery CSRF vulnerability in Jongmyoung Kim Korea SNS.This issue affects Korea SNS: from n/a through 1.6.3...
CVE-2023-47685
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
CVE-2023-24048
Cross Site Request Forgery CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /manpassword.htm...
CVE-2023-23897
Cross-Site Request Forgery CSRF vulnerability in Ozette Plugins Simple Mobile URL Redirect plugin = 1.7.2 versions...
CVE-2023-2329
The WooCommerce Google Sheet Connector WordPress plugin before 1.3.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack...
CVE-2023-22852
Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-importsheet.php...
CVE-2023-27446
Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...
CVE-2023-26840
A cross-site request forgery CSRF vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator...
CVE-2023-2277
The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...