CVE-2026-9674

The Jenkins Multijob Plugin versions 662.vd2e0001f6b_b_d and earlier are vulnerable to a cross-site request forgery (CSRF) vulnerability. The root cause is that the plugin does not require POST requests for a specific HTTP endpoint. This flaw allows an attacker to perform unauthorized actions by ...

WordPress plugin Sticky Buttons 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-14949 · WordPress · Wordpress Toolbar

Name of the Vulnerable Software and Affected Versions: WordPress Toolbar WordPress plugin versions 2.2.6 and earlier Description: The issue allows unauthenticated attackers to redirect users to potentially malicious sites by tricking them into performing an action. This is achieved via the wptbto...

CVE-2022-27204

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...