PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.

CVE-2023-38381MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-FlyBox plugin <= 6.46 versions.

CVE-2023-38390MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Anshul Labs Mobile Address Bar Changer plugin <= 3.0 versions.

CVE-2023-38396MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.

CVE-2023-38398MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Taboola plugin <= 2.0.1 versions.

CVE-2023-3841MEDIUMCVSS 4.3EG 4.3

2023-07-23

A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The…

CVE-2023-38512MEDIUMCVSS 5.4EG 5.4

2023-07-27

Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream wpstream allows Cross Site Request Forgery.This issue affects WpStream: from n/a through <= 4.5.4.

CVE-2023-38579HIGHCVSS 8.0EG 8.0

2024-02-06

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the att…

CVE-2023-38739MEDIUMCVSS 4.3EG 4.3

2025-01-31

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the websit…

CVE-2023-38759HIGHCVSS 8.8EG 8.8

2023-08-08

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templ…

CVE-2023-38885HIGHCVSS 8.8EG 8.8

2023-11-20

OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole app. This may allow an attacker to trick an authenticated user into performing any kind of state changing request.

CVE-2023-38999MEDIUMCVSS 6.5EG 6.5

2023-08-09

A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

CVE-2023-39061LOWCVSS 3.5EG 3.5

2023-08-21

Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code.

CVE-2023-39153MEDIUMCVSS 5.4EG 5.4

2023-07-26

A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.

CVE-2023-39156MEDIUMCVSS 5.3EG 4.3

2023-07-26

A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.

CVE-2023-39158MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.

CVE-2023-39159MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.

CVE-2023-39165MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.

CVE-2023-39166HIGHCVSS 7.1EG 7.1

2023-11-13

Cross-Site Request Forgery (CSRF) vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting (XSS).This issue affects tagDiv Composer: from n/a before 4.4.

CVE-2023-39285MEDIUMCVSS 4.3EG 4.3

2023-09-14

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A …

CVE-2023-39286MEDIUMCVSS 4.3EG 4.3

2023-09-14

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A …

CVE-2023-39311HIGHCVSS 7.1EG 7.1

2024-03-27

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

CVE-2023-39372HIGHCVSS 8.1EG 8.1

2023-09-03

StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352)

CVE-2023-39412MEDIUMCVSS 5.4EG 5.4

2023-11-14

Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

CVE-2023-39446HIGHCVSS 8.9EG 8.9

2023-09-18

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a…

CVE-2023-3977MEDIUMCVSS 4.3EG 4.3

2023-07-28

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX a…

CVE-2023-39917MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.

CVE-2023-39923MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.

CVE-2023-39925MEDIUMCVSS 5.4EG 5.4

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Download Community by PeepSo plugin <= 6.1.6.0 versions.

CVE-2023-39989MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.

CVE-2023-4000MEDIUMCVSS 6.3EG 6.3

2023-08-31

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible fo…

CVE-2023-40008MEDIUMCVSS 4.3EG 4.3

2023-10-06

Cross-Site Request Forgery (CSRF) vulnerability in Gangesh Matta Simple Org Chart plugin <= 2.3.4 versions.

CVE-2023-40009MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions.

CVE-2023-40048MEDIUMCVSS 6.8EG 6.8

2023-09-27

In WS_FTP Server version prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

CVE-2023-4013MEDIUMCVSS 6.5EG 6.5

2023-08-30

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's lic…

CVE-2023-40172MEDIUMCVSS 6.5EG 6.5

2023-08-18

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into per…

CVE-2023-40198MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Antsanchez Easy Cookie Law plugin <= 3.1 versions.

CVE-2023-40199MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.

CVE-2023-40201MEDIUMCVSS 6.5EG 6.5

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in FuturioWP Futurio Extra plugin <= 1.8.4 versions leads to activation of arbitrary plugin.

CVE-2023-40202MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Hannes Etzelstorfer // codemiq WP HTML Mail plugin <= 3.4.1 versions.

CVE-2023-40210MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in Sean Barton (Tortoise IT) SB Child List plugin <= 4.5 versions.

CVE-2023-40212MEDIUMCVSS 4.3EG 4.3

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions.

CVE-2023-40335HIGHCVSS 7.1EG 7.1

2023-11-13

Cross-Site Request Forgery (CSRF) vulnerability in Jeremy O'Connell Cleverwise Daily Quotes allows Stored XSS.This issue affects Cleverwise Daily Quotes: from n/a through 3.2.

CVE-2023-40336HIGHCVSS 8.8EG 8.8

2023-08-16

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders.

CVE-2023-40337MEDIUMCVSS 4.3EG 4.3

2023-08-16

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.

CVE-2023-40341HIGHCVSS 8.8EG 8.8

2023-08-16

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job.

CVE-2023-40351MEDIUMCVSS 4.3EG 4.3

2023-08-16

A cross-site request forgery (CSRF) vulnerability in Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier allows attackers to add or remove views from another user's favorite views tab bar.

CVE-2023-4047HIGHCVSS 8.8EG 8.8

2023-08-01

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

CVE-2023-40556MEDIUMCVSS 4.3EG 4.3

2023-10-06

Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.

CVE-2023-40558MEDIUMCVSS 5.4EG 5.4

2023-10-03

Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.3.5 versions.

CWE-352— Cross-Site Request Forgery (CSRF)

CVEs classified under CWE-352page 92 of 175

Map vulnerabilities like CWE-352 to your infrastructure