51316 matches found
CVE-2019-15660
The wp-members plugin before 3.2.8 for WordPress has CSRF...
CVE-2019-15496
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...
CVE-2019-15113
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF...
CVE-2019-13056
An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-mail and password because of the lack of CSRF protection...
CVE-2019-13974
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...
CVE-2019-13183
Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings...
CVE-2019-15128
iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user...
CVE-2019-13395
The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...
CVE-2019-14933
Bagisto 0.1.5 allows CSRF under /admin URIs...
CVE-2019-10673
A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become admin and subsequently extract sensitive information and execute arbitrary code. This occurs because the attacker can change the e-mail address in the...
CVE-2018-14582
index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-20419
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
CVE-2018-10048
iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...
CVE-2018-9856
Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request...
CVE-2018-19613
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF...
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2018-11371
SkyCaiji 1.2 allows CSRF to add an Administrator user...