10418 matches found
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
PT-2025-17109 · Softagon · Softagon Woocommerce Products
Name of the Vulnerable Software and Affected Versions: SOFTAGON WooCommerce Products versions n/a through 0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS in SOFTAGON WooCommerce Products without featured images. Recommendations: For versions...
PT-2025-17010 · Verge3D · Verge3D
Name of the Vulnerable Software and Affected Versions: Verge3D versions prior to 4.9.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the...
PT-2025-16983 · Unknown · Ichi Translit It!
Name of the Vulnerable Software and Affected Versions: Ichi translit it! versions n/a through 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 1.6, update to a version that includes a fix for this issue...
Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation
Exploit Title: Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation Google Dork: N/A Date: 2024-12-26 Exploit Author: Kwangyun Keum Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/blood-bank-donor-management-system/ Version: 2.4 Tested on: Windo...
CVE-2025-39472
Cross-Site Request Forgery CSRF vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through 2.8.3...
CVE-2025-39472 WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through 2.8.3...
CVE-2025-39472
CVE-2025-39472 corresponds to a CSRF vulnerability in the WPWooCommerce Social Login plugin (WooCommerce Social Login). Affected versions are 2.8.2 and earlier; the issue arises from Cross-Site Request Forgery that could allow unauthorized actions on behalf of a user. The fix is to upgrade to ver...
CVE-2017-15808
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
Exploit for CVE-2025-39601
🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & P...
WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Basic Interactive World Map versions = 2.7...
WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability
CSRF to XSS vulnerability discovered by johska in WordPress Plugin Internal Link Optimiser versions = 5.1.3...
CVE-2025-39601
Cross-Site Request Forgery CSRF vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through = 2.4.1...
CVE-2025-39564
Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Shipping for WooCommerce: from n/a through = 3.4.0...
CVE-2025-39563
Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...
CVE-2025-39530
CVE-2025-39530 refers to a CSRF-to-Stored-XSS vulnerability in the WordPress plugin “Site Search 360” (WordPress Site Search 360) affecting versions up to 2.1.7. The NVD entry and Red Hat advisory describe cross-site request forgery that enables stored XSS with a CVSS v3.1 base score of 7.1 (HIGH...
CVE-2025-39544 WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in sminozzi WP Tools wptools allows Path Traversal.This issue affects WP Tools: from n/a through = 5.18...
CVE-2025-39544 WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi WP Tools allows Path Traversal. This issue affects WP Tools: from n/a through 5.18...