CVE-2023-29235

Cross-Site Request Forgery CSRF vulnerability in Fugu Maintenance Switch plugin = 1.5.2 versions...

CVE-2023-40008

Cross-Site Request Forgery CSRF vulnerability in Gangesh Matta Simple Org Chart plugin = 2.3.4 versions...

CVE-2023-27448

Overview: CVE-2023-27448 affects the WordPress MakeStories (for Google Web Stories) plugin. According to Patchstack, vulnerable versions are 3.0.2, specifically 3.0.3 or later. The Red Hat/NVD entries corroborate the CSRF vector, but the Patchstack entry provides the concrete fixed version. Prac...

CVE-2023-40008

CVE-2023-40008 affects the Gangesh Matta Simple Org Chart WordPress plugin, with CSRF in versions prior to 2.3.4. The Red Hat entry, NVD, and other sources corroborate a Cross-Site Request Forgery vulnerability present in plugin versions

Cross-Site Request Forgery Vulnerability in Logout Functionality

Description Logout CSRF is a security vulnerability where an attacker forces a user to unknowingly log out of their session by tricking them into triggering a logout request through a malicious website or link. The csrftoken for the logout interface is invalid, it is recommended to change it to...

CVE-2023-40556

Cross-Site Request Forgery CSRF vulnerability in Greg Ross Schedule Posts Calendar plugin = 5.2 versions...

PT-2023-19884 · WordPress · Sumo Social Share Boost

Name of the Vulnerable Software and Affected Versions: Sumo Social Share Boost plugin versions = 4.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-28188 · Laposta · Laposta Signup Basic

Name of the Vulnerable Software and Affected Versions: Laposta - Roel Bousardt Laposta Signup Basic plugin versions = 1.4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application th...

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

CVE-2023-25788

Cross-Site Request Forgery CSRF vulnerability in Saphali Saphali Woocommerce Lite plugin = 1.8.13 versions...

PT-2023-20405 · Cage Web Design · Optimize Database After Deleting Revisions

Name of the Vulnerable Software and Affected Versions: CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin versions = 5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-40201

Cross-Site Request Forgery CSRF vulnerability in FuturioWP Futurio Extra plugin = 1.8.4 versions leads to activation of arbitrary plugin...

CVE-2023-32792

Cross-Site Request Forgery CSRF vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of...

CVE-2023-32792

CVE-2023-32792: CSRF in NXLog Manager 5.6.5633 due to lack of origin validation in incoming requests. An attacker can cause the platform to eliminate roles via a crafted request. Verified in multiple sources (NVD/NVDC/CNVD, etc.). Exploitation details are not provided in the reports; no in‑the‑wi...

CVE-2023-40009

The CVE-2023-40009 entry concerns the WordPress WP Pipes plugin (

CVE-2023-39917

Cross-Site Request Forgery CSRF vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.2.6 versions...

CVE-2023-39165

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets plugin = 2.2.8 versions...

CVE-2023-39923

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...

CVE-2023-2830

CVE-2023-2830 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Trustindex.Io WP Testimonials WordPress plugin, affecting versions ≤ 1.4.2. The vulnerability is addressed by upgrading to version 1.4.3 or later. Several sources (Patchstack, Red Hat, NVD/CVE references) consistentl...