CVE-2026-82544

A cross-site request forgery (CSRF) vulnerability exists in wger-project wger up to version 2.6.0-alpha2 , specifically in the reset_user_password function within the Password Reset component (wger/gym/views/gym.py). A remote attacker can exploit this by manipulating a victim into performing an u...

CVE-2023-38759: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/resetuserpassword.html, templates/user/overview.html, core/views/user.py, and...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...