CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Abstract: A High-Severity Cross-Site Request Forgery CSRF vulnerability CVE-2026-13156 was discovered in the official MailerSend SMTP Integration plugin for WordPress 1.0.8. The configuration eradication handler...

CVE-2025-67315

CSRF to Deactivate Any Employee Summary The Manage Employees functionality is vulnerable to Cross-Site Request Forgery CSRF. An attacker can trick a logged-in admin into sending a forged request that inactivates an employee e.g., inid=1 without the admin’s knowledge or consent. CVSS Base Score: 5...

roller-csrf

Apache Roller v6.1.2 - Cross-Site Request Forgery CSRF in Profile Update Vulnerability Details Version : v6.1.2 Date : 2025-11-09 Exploit Author : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 Vendor Homepage : https://roller.apache.org Software Link :...

CVE-2026-92978

The User Registration & Membership plugin for WordPress (versions up to and including 5.2.8 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is missing or incorrect nonce validation on the trigger_bulk_action() function. Specifically, an attacker can bypass nonce chec...

MAGMI - Cross-Site Request Forgery

MAGMI Magento Mass Importer is vulnerable to cross-site request forgery CSRF due to a lack of CSRF tokens. Remote code execution via phpcli command is also possible in the event that CSRF is leveraged against an existing admin session. id: CVE-2020-5776 info: name: MAGMI - Cross-Site Request...

WordPress User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action() vulnerability

Cross-Site Request Forgery to triggerbulkaction vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin User Registration versions = 5.2.8...

Chromium CVE-2026-106216: Cross-site request forgery

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-111413

The aThemeArt Theme Helper WordPress plugin (versions up to and including 1.0.8 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . This flaw allows an attacker to perform actions on behalf of an authenticated user. No specific remediation or exploit information is provided in the documents.

CVE-2026-111413 WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2024-22939

target:https://github.com/sunkaifei/FlyCms version: v1.0 FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/article/categoryedit Poc history.pushState'', '', '/' Success:...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploit CSRF on SCOPIA XT Desktop version 8.3.915.4 This PoC will be describe how to explore Cross-Site Request CSRF Forgery on SCOPIA XT Desktop version 8.3.915.4 About SCOPIA website: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 About Cross-Site Request Forgery CSRF Cross-site...

USN-8933-1: RabbitMQ Server vulnerabilities

It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request forgery attack. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...

CVE-2024-34958

CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...

CVE-2025-39601

🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & PHP plugin WordPress Custom CSS, JS & PHP plugin CSRF PoC - WordPress Custom CSS, JS & PHP plugin By : Nxploited | Khaled Alenazi input typ...