10414 matches found
CVE-2024-31373
Cross-Site Request Forgery CSRF vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through = 1.20.27...
CVE-2024-31381
Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...
CVE-2024-31433
Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar.This issue affects The Events Calendar: from n/a through = 6.3.0...
CVE-2024-32440
Cross-Site Request Forgery CSRF vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.8.0...
CVE-2024-32450
Cross-Site Request Forgery CSRF vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0...
CVE-2024-31389
Cross-Site Request Forgery CSRF vulnerability in Ertano MihanPanel.This issue affects MihanPanel: from n/a before 12.7...
CVE-2024-31942
Cross-Site Request Forgery CSRF vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.2...
CVE-2024-32438
Cross-Site Request Forgery CSRF vulnerability in cleverplugins.Com SEO Booster.This issue affects SEO Booster: from n/a through 3.8.9...
CVE-2024-40601
An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules...
CVE-2024-31932
Cross-Site Request Forgery CSRF vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through 2.0.28...
CVE-2024-27783
Multiple cross-site request forgery CSRF weaknesses CWE-352 vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests...
CVE-2024-31944
Cross-Site Request Forgery CSRF vulnerability in Octolize WooCommerce UPS Shipping – Live Rates and Access Points.This issue affects WooCommerce UPS Shipping – Live Rates and Access Points: from n/a through 2.2.4...
CVE-2024-32097
Cross-Site Request Forgery CSRF vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.1...
CVE-2024-32436
Cross-Site Request Forgery CSRF vulnerability in Codemenschen Gift Vouchers.This issue affects Gift Vouchers: from n/a through 4.4.0...
CVE-2024-32445
Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition.This issue affects WebinarIgnition: from n/a through = 3.05.8...
CVE-2024-23910
Cross-site request forgery CSRF vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B a...
CVE-2024-30421
Cross-Site Request Forgery CSRF vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.7.1...
CVE-2024-23510
Cross-Site Request Forgery CSRF vulnerability in Martyn Chamberlin Don't Muck My Markup.This issue affects Don't Muck My Markup: from n/a through 1.8...
CVE-2024-1232
The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack...
CVE-2024-1489
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.9. This is due to missing or incorrect nonce validation on the processBulkAction function. This makes it possible for unauthenticated attacker...