CVE-2026-121472 AutomatorWP < 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRF

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

CVE-2026-121472

The AutomatorWP WordPress plugin, in versions prior to 6.0.8 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a failure to bind requests completing Zoom and AWeber integration connections to the specific administrator who initiated them. An attacker can exploit thi...

CVE-2021-32156

..| CSRF to RCE CRON |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2024-51435

bloodbank A simple csrf poc found on blood bank system v 1.0...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Unauthenticated CSRF Account TakeOver in BigTreeCMS v4.4.14 All searchable modules in the admin panel of BigTreeCMS v4.4.14 are vulnerable to reflected DOM-XSS via the URI. Search queries are reflected on the page without proper sanitization...

CVE-2020-23589

CVE-2020-23589 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" which allows an unauthenticated, remote attacker to conduct a...

CVE-2024-10557

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: /file/updateprofile.php Vulnerability Description: There is a CSRF vulnerability on this endpoint...

CVE-2026-126067

A flaw was found in Action Pack. Certain non-cookie session stores fail to apply the configured SameSite attribute when issuing session cookies. In web browsers that do not automatically enforce cross-site cookie restrictions, a remote attacker could induce an authenticated user's browser to send...

CVE-2024-10448

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: /file/delete.php?bid= Vulnerability Description: A Cross Site Request Forgery CSRF vulnerability was...

CVE-2024-45264

CVE-2024-45264 Suggested description A cross-site request forgery CSRF vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3132 allows remote attackers to add a new administrator, leading to escalation of privileges. Vulnerability Type CWE-352 | Cross Site Request Forgery CSRF Vendo...

PT-2026-145181

Cross-Site Request Forgery CSRF in Apache Roller 5.0.1 through 6.1.6 allows an unauthenticated attacker to create an administrator account if a logged-in Roller administrator opens a link that the attacker controls. The request-token check applied only to POST requests, and administrative actions...

PT-2026-145655

This module enables you to create custom pages and to override existing paths, such as node or user pages, with variants that are selected by conditions. The Page Manager UI submodule doesn't sufficiently protect against cross-site request forgery CSRF. An attacker could trick a user with...

PT-2026-145221

Cross-Site Request Forgery CSRF vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7...

PT-2026-145226

Cross-Site Request Forgery CSRF vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4...

CVE-2026-125839: webriti ElitePress: Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This…

Cross-Site Request Forgery CSRF vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This issue affects ElitePress: from n/a through 3.2.1...

CVE-2026-125840: webriti Rambo: Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue…

Cross-Site Request Forgery CSRF vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue affects Rambo: from n/a through 3.0...

CVE-2026-125841: webriti Heroic: Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue…

Cross-Site Request Forgery CSRF vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2...

CVE-2026-125844: webriti vice: Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue…

Cross-Site Request Forgery CSRF vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4...

CVE-2026-125845: webriti vdequator: Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This…

Cross-Site Request Forgery CSRF vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7...

CVE-2026-125846: webriti Mazino: Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue…

Cross-Site Request Forgery CSRF vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue affects Mazino: from n/a through 1.1...