CVE-2026-9674

The Jenkins Multijob Plugin versions 662.vd2e0001f6b_b_d and earlier are vulnerable to a cross-site request forgery (CSRF) vulnerability. The root cause is that the plugin does not require POST requests for a specific HTTP endpoint. This flaw allows an attacker to perform unauthorized actions by ...

WordPress plugin Sticky Buttons has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-14949 · WordPress · Wordpress Toolbar

Name of the Vulnerable Software and Affected Versions: WordPress Toolbar WordPress plugin versions 2.2.6 and earlier Description: The issue allows unauthenticated attackers to redirect users to potentially malicious sites by tricking them into performing an action. This is achieved via the wptbto...

CVE-2022-27204

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...