Cross-Site Request Forgery (CSRF) vulnerability in Toastie Studio Woocommerce Social Media Share Buttons allows Stored XSS.This issue affects Woocommerce Social Media Share Buttons: from n/a through 1.3.0.

CVE-2024-31113MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11.

CVE-2024-31205MEDIUMCVSS 4.2EG 4.2

2024-04-08

Saleor is an e-commerce platform. Starting in version 3.10.0 and prior to versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3.18.31, and 3.19.19, an attacker may bypass cross-set request forgery (CSRF) validation when calling refresh token muta…

CVE-2024-31235MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.5.

CVE-2024-31238MEDIUMCVSS 5.4EG 5.4

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5.

CVE-2024-31239MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Nudgify Nudgify Social Proof, Sales Popup & FOMO.This issue affects Nudgify Social Proof, Sales Popup & FOMO: from n/a through 1.3.3.

CVE-2024-31250MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3.

CVE-2024-31251MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.3.1.1.

CVE-2024-31262MEDIUMCVSS 5.4EG 5.4

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Jcodex WooCommerce Checkout Field Editor (Checkout Manager).This issue affects WooCommerce Checkout Field Editor (Checkout Manager): from n/a through 2.1.8.

CVE-2024-31263MEDIUMCVSS 5.4EG 5.4

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in aerin Loan Repayment Calculator and Application Form.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.4.

CVE-2024-31264MEDIUMCVSS 4.3EG 4.3

2024-04-12

Unauthenticated Cross Site Request Forgery (CSRF) in Post Views Counter <= 1.4.4 versions.

CVE-2024-31265LOWCVSS 3.7EG 3.7

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in SumoMe Sumo.This issue affects Sumo: from n/a through 1.34.

CVE-2024-31268MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.

CVE-2024-31269MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps.This issue affects Easy Google Maps: from n/a through 1.11.11.

CVE-2024-31271MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16.

CVE-2024-31272MEDIUMCVSS 6.3EG 6.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.

CVE-2024-31279MEDIUMCVSS 5.4EG 5.4

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0.

CVE-2024-31285HIGHCVSS 7.1EG 7.1

2024-04-11

Cross-Site Request Forgery (CSRF) vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3.

CVE-2024-31289MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Elementor Hello Elementor.This issue affects Hello Elementor: from n/a through 3.0.0.

CVE-2024-31293MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.6.

CVE-2024-31299HIGHCVSS 7.1EG 7.1

2024-04-10

Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting (XSS).This issue affects ReDi Restaurant Reservation: from n/a through 24.0128.

CVE-2024-31301MEDIUMCVSS 5.4EG 5.4

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

CVE-2024-31303MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.11.1.

CVE-2024-31305MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in rtCamp Transcoder.This issue affects Transcoder: from n/a through 1.3.5.

CVE-2024-3135MEDIUMCVSS 6.5EG 6.5

2024-04-01

A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform unauthorized actions on the victim's local LocalAI instance …

CVE-2024-31354MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.

CVE-2024-31360MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Coded Commerce, LLC Benchmark Email Lite.This issue affects Benchmark Email Lite: from n/a through 4.1.

CVE-2024-31362MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.

CVE-2024-31363MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0.

CVE-2024-31364MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2.

CVE-2024-31369MEDIUMCVSS 5.4EG 5.4

2024-04-09

Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

CVE-2024-31371MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.

CVE-2024-31372MEDIUMCVSS 4.3EG 4.3

2024-04-12

Cross-Site Request Forgery (CSRF) vulnerability in Arnan de Gans No-Bot Registration.This issue affects No-Bot Registration: from n/a through 1.9.1.

CVE-2024-31373MEDIUMCVSS 5.4EG 5.4

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27.

CVE-2024-31374MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Scott Bolinger AppPresser apppresser allows Cross Site Request Forgery.This issue affects AppPresser: from n/a through <= 4.3.0.

CVE-2024-31376MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.3.1.

CVE-2024-31378MEDIUMCVSS 5.4EG 5.4

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1.

CVE-2024-31379MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Smash Balloon Social Post Feed.This issue affects Smash Balloon Social Post Feed: from n/a through 4.2.1.

CVE-2024-31381MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10.

CVE-2024-31382MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through <= 2.0.22.

CVE-2024-31383MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.2.4.

CVE-2024-31384MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon: from n/a through 1.2.7.

CVE-2024-31385MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128.

CVE-2024-31386MEDIUMCVSS 4.3EG 4.3

2024-04-10

Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconn…

CVE-2024-31388MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Pauple Table & Contact Form 7 Database – Tablesome.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.25.

CVE-2024-31389MEDIUMCVSS 5.4EG 5.4

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Ertano MihanPanel.This issue affects MihanPanel: from n/a before 12.7.

CVE-2024-3142MEDIUMCVSS 4.3EG 4.3

2024-04-02

A vulnerability was found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross-site request forgery. The attack …

CVE-2024-31422MEDIUMCVSS 4.3EG 4.3

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Philippe Bernard Favicon.This issue affects Favicon: from n/a through 1.3.29.

CVE-2024-31424HIGHCVSS 8.8EG 8.8

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.

CVE-2024-31425MEDIUMCVSS 5.4EG 5.4

2024-04-15

Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95.

CWE-352— Cross-Site Request Forgery (CSRF)

CVEs classified under CWE-352page 114 of 175

Map vulnerabilities like CWE-352 to your infrastructure