CVE-2023-2505

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files...

CVE-2022-45376

Cross-Site Request Forgery CSRF vulnerability in XootiX Side Cart Woocommerce Ajax 2.1 versions...

CVE-2022-41608

CVE-2022-41608 is a CSRF vulnerability in the WordPress Asgaros Forum plugin, affecting versions

CVE-2022-45076

CVE-2022-45076: WordPress/WebMat Flexible Elementor Panel plugin (versions <= 2.3.8) is affected by a Cross-Site Request Forgery (CSRF) vulnerability. Root cause and impact are described in multiple connected records as CSRF affecting the plugin, with high-impact metrics on some sources but Pa...

CVE-2023-22692

CVE-2023-22692 : Cross-Site Request Forgery (CSRF) in the WordPress plugin “Name Directory” (Jeroen Peters) affecting versions

PT-2023-14544 · WordPress · Thingsforrestaurants Quick Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: ThingsForRestaurants Quick Restaurant Reservations plugin versions 1.5.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-14587 · WordPress · Webmat Flexible Elementor Panel

Name of the Vulnerable Software and Affected Versions: WebMat Flexible Elementor Panel plugin versions = 2.3.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

PT-2023-19897 · Birddog · 4K Quad +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files. Recommendations: At the moment,...

PT-2023-18657 · Supsystic · Supsystic Coming Soon

Name of the Vulnerable Software and Affected Versions: Supsystic Coming Soon by Supsystic plugin versions = 1.7.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the us...

CVE-2022-47134

Cross-Site Request Forgery CSRF vulnerability in Bill Erickson Gallery Metabox plugin = 1.5 versions...

CVE-2023-23890

CVE-2023-23890 affects the WordPress plugin WP Airbnb Review Slider (LJ Apps) versioned up to 3.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can lead to reviews being removed; Patch details indicate the issue is exploitable by an unauthenticated attacker and is fixed in versio...

Cross site request forgery (csrf)

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation on the 'enablesafemode' function. This makes it possible for unauthenticated attackers to enable safe mode, which disables all other...

PT-2023-15179 · WordPress · Bill Erickson Gallery Metabox

Name of the Vulnerable Software and Affected Versions: Bill Erickson Gallery Metabox plugin versions = 1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

CVE-2023-25698

CVE-2023-25698: CSRF in WordPress Shoppable Images Lite plugin = 1.2.4.

PT-2023-21119 · WordPress · Ramon Fincken Mass Delete Unused Tags

Name of the Vulnerable Software and Affected Versions: Ramon Fincken Mass Delete Unused Tags plugin versions = 2.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web applicati...

plugin: CSRF vulnerability in Blue Ocean Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server...

CVE-2023-2608

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 3.3.17 due to missing nonce verification on the projectslist function and insufficient escaping o...

WordPress is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Type WordPress Core Vulnerable versions = 6.2 Fixed in 6.2.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 472fe0253e33 Credits John Blackbourn Required...

GHSA-MJMF-7WJW-F5XX Jenkins Code Dx Plugin missing permission checks

Jenkins Code Dx Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, these HTTP endpoints do not require POST requests, resulting in a cross-site request...