CVE-2026-125849

The webriti Shk Corporate WordPress theme (versions

WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by beopseong.kim in WordPress Theme Shk Corporate versions = 2.4.3...

CVE-2026-125446

Cross-Site Request Forgery CSRF vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4...

CVE-2026-125445

Cross-Site Request Forgery CSRF vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.This issue affects VOD Infomaniak: from n/a through 1.5.16...

CVE-2026-124263

Cross-Site Request Forgery CSRF vulnerability in plainware Locatoraid Store Locator locatoraid allows Cross Site Request Forgery.This issue affects Locatoraid Store Locator: from n/a through 3.9.75...

CVE-2026-118411

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

CVE-2026-105154

Cross-Site Request Forgery CSRF in the Planet feed aggregator administration of Apache Roller 4.0 through 6.1.6 allows an unauthenticated attacker to make the Roller server fetch a URL the attacker chooses, including internal addresses, by inducing a logged-in global administrator to open a craft...

CVE-2026-125850

The Appointment Dark WordPress theme (versions

CVE-2026-125850 WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4...

EUVD-2026-123471

Cross-Site Request Forgery CSRF vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4...

WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by beopseong.kim in WordPress Theme Appointment Dark versions = 1.3.4...

CVE-2024-56924

CVE-2024-56924 Vulnerability Description A Cross-Site Request Forgery CSRF vulnerability exists in the code astro Internet Banking System version 2.0.0, which allows remote attackers to perform unauthorized actions on behalf of authenticated users, such as administrators, without their knowledge...

Wordpress_cve-2019-9787_defense

Wordpresscve-2019-9787defense Notice This is a project by Sijia Zhanghttps://github.com/sijiahi and Bowen Zhouhttps://github.com/KonjakZhou Prerequisite: 1 Recurrence Attack: - Configure and install Wordpress5.0 under http://localhost/wp-admin/; - Log in Wordpress as admin, post at least one...

phpmyadmin-setup-validate

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-setup-validate Write-up: https://abraxaslabs.tech/research/phpmyadmin-setup-validate phpmyadmin-setup-validate Class: SSRF Reach: Remote phpMyAdmin 5.2.3 tag RELEASE523, commit 962857e. setup/index.php dies...

CVE-2026-118411 Apache Roller: Cross-site request forgery through GET requests to administrative actions

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

CVE-2026-118411

A Cross-Site Request Forgery (CSRF) vulnerability exists in Apache Roller versions 5.0.1 through 6.1.6 . The root cause is that the application's request-token check is only applied to POST requests, while administrative actions also accept GET requests. This allows an unauthenticated attacker to...

CVE-2026-118411 Apache Roller: Cross-site request forgery through GET requests to administrative actions

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

CVE-2026-118411

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

EUVD-2026-123511

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

EUVD-2026-123424

Cross-Site Request Forgery CSRF in the Planet feed aggregator administration of Apache Roller 4.0 through 6.1.6 allows an unauthenticated attacker to make the Roller server fetch a URL the attacker chooses, including internal addresses, by inducing a logged-in global administrator to open a craft...