Cross-Site Request Forgery (CSRF) vulnerability in Creative Motion Clearfy Cache.This issue affects Clearfy Cache: from n/a through 2.2.1.

CVE-2024-34807MEDIUMCVSS 4.3EG 4.3

2024-05-17

Cross-Site Request Forgery (CSRF) vulnerability in CodeBard Fast Custom Social Share by CodeBard fast-custom-social-share-by-codebard.This issue affects Fast Custom Social Share by CodeBard: from n/a through <= 1.1.2.

CVE-2024-34809MEDIUMCVSS 4.3EG 4.3

2024-05-17

Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes EmpowerWP.This issue affects EmpowerWP: from n/a through 1.0.21.

CVE-2024-3481MEDIUMCVSS 5.2EG 5.2

2024-05-02

The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks

CVE-2024-34814MEDIUMCVSS 5.4EG 5.4

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Unyson Unyson unyson.This issue affects Unyson: from n/a through <= 2.7.29.

CVE-2024-34816MEDIUMCVSS 5.4EG 5.4

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8.

CVE-2024-34817MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: fr…

CVE-2024-34818HIGHCVSS 7.1EG 7.1

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17.

CVE-2024-34823MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter.This issue affects Arigato Autoresponder and Newsletter: from n/a through 2.7.2.3.

CVE-2024-34825MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Warfare Plugins Social Warfare.This issue affects Social Warfare: from n/a through 4.4.5.1.

CVE-2024-34827MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Razvan Mocanu, Madalin Ungureanu, Cristophor Hurduban TranslatePress.This issue affects TranslatePress: from n/a through 2.7.5.

CVE-2024-34828MEDIUMCVSS 4.3EG 4.3

2024-05-14

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.

CVE-2024-34957MEDIUMCVSS 5.4EG 5.4

2024-05-16

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.

CVE-2024-34958MEDIUMCVSS 6.5EG 6.5

2024-05-16

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add

CVE-2024-35009HIGHCVSS 8.8EG 8.8

2024-05-14

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.

CVE-2024-35010HIGHCVSS 8.8EG 8.8

2024-05-14

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6.

CVE-2024-35011MEDIUMCVSS 5.4EG 5.4

2024-05-14

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close.

CVE-2024-35012MEDIUMCVSS 6.3EG 6.3

2024-05-14

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close.

CVE-2024-35039LOWCVSS 3.8EG 3.8

2024-05-16

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area.

CVE-2024-35108HIGHCVSS 8.8EG 8.8

2024-05-15

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN.

CVE-2024-35109MEDIUMCVSS 6.5EG 6.5

2024-05-15

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close.

CVE-2024-35138MEDIUMCVSS 6.5EG 6.5

2025-02-04

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trust…

CVE-2024-35207HIGHCVSS 7.8EG 7.8

2024-06-11

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery(CSRF) attacks. By tricking an authenticated vi…

CVE-2024-35475MEDIUMCVSS 6.4EG 6.4

2024-05-22

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative…

CVE-2024-35550MEDIUMCVSS 6.3EG 6.3

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev.

CVE-2024-35551MEDIUMCVSS 4.3EG 4.3

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add.

CVE-2024-35552HIGHCVSS 8.8EG 8.8

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN.

CVE-2024-35553HIGHCVSS 8.3EG 8.3

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close.

CVE-2024-35554MEDIUMCVSS 5.4EG 5.4

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN.

CVE-2024-35555MEDIUMCVSS 6.3EG 6.3

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40.

CVE-2024-35556HIGHCVSS 8.8EG 8.8

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.

CVE-2024-35557MEDIUMCVSS 5.5EG 5.5

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.

CVE-2024-35558HIGHCVSS 8.8EG 8.8

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.

CVE-2024-35559HIGHCVSS 8.8EG 8.8

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close.

CVE-2024-35560MEDIUMCVSS 4.3EG 4.3

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN.

CVE-2024-35561MEDIUMCVSS 5.4EG 5.4

2024-05-22

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close.

CVE-2024-35632MEDIUMCVSS 4.3EG 4.3

2024-06-03

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5.

CVE-2024-35636MEDIUMCVSS 4.3EG 4.3

2024-06-01

Cross-Site Request Forgery (CSRF) vulnerability in Uploadcare Uploadcare File Uploader and Adaptive Delivery (beta) uploadcare.This issue affects Uploadcare File Uploader and Adaptive Delivery (beta): from n/a through 3.0.11.

CVE-2024-35638MEDIUMCVSS 4.3EG 4.3

2024-06-03

Cross-Site Request Forgery (CSRF) vulnerability in JumpDEMAND Inc. ActiveDEMAND.This issue affects ActiveDEMAND: from n/a through 0.2.43.

CVE-2024-35657MEDIUMCVSS 5.4EG 5.4

2024-06-08

Cross-Site Request Forgery (CSRF) vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.6.

CVE-2024-35673MEDIUMCVSS 4.3EG 4.3

2024-06-05

Cross-Site Request Forgery (CSRF) vulnerability in Pure Chat by Ruby Pure Chat.This issue affects Pure Chat: from n/a through 2.22.

CVE-2024-35684MEDIUMCVSS 4.3EG 4.3

2024-06-08

Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.

CVE-2024-35689MEDIUMCVSS 5.4EG 5.4

2024-06-08

Cross-Site Request Forgery (CSRF) vulnerability in Analytify.This issue affects Analytify: from n/a through 5.2.3.

CVE-2024-35770MEDIUMCVSS 4.3EG 4.3

2024-06-21

Cross-Site Request Forgery (CSRF) vulnerability in Dave Kiss Vimeography: Vimeo Video Gallery WordPress Plugin.This issue affects Vimeography: Vimeo Video Gallery WordPress Plugin: from n/a through 2.4.1.

CVE-2024-35771MEDIUMCVSS 4.3EG 4.3

2024-06-21

Cross-Site Request Forgery (CSRF) vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21.

CVE-2024-35772MEDIUMCVSS 4.3EG 4.3

2024-06-21

Cross-Site Request Forgery (CSRF) vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24.

CVE-2024-35773HIGHCVSS 7.1EG 7.1

2024-07-12

Cross-Site Request Forgery (CSRF) vulnerability in WPJohnny, zerOneIT Comment Reply Email allows Cross-Site Scripting (XSS).This issue affects Comment Reply Email: from n/a through 1.3.

CVE-2024-3582MEDIUMCVSS 4.8EG 4.8

2024-05-14

The UnGallery WordPress plugin through 2.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVE-2024-3590MEDIUMCVSS 6.1EG 6.1

2024-05-14

The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers

CVE-2024-3593HIGHCVSS 7.2EG 7.2

2024-06-22

The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the ubermenu_delete_all_item_settings and ubermenu_reset_set…

CWE-352— Cross-Site Request Forgery (CSRF)

CVEs classified under CWE-352page 118 of 175

Map vulnerabilities like CWE-352 to your infrastructure