Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions.

CVE-2023-47687MEDIUMCVSS 4.3EG 4.3

2023-11-16

Cross-Site Request Forgery (CSRF) vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin <= 2.6.0 versions.

CVE-2023-47688MEDIUMCVSS 4.3EG 4.3

2023-11-16

Cross-Site Request Forgery (CSRF) vulnerability in Alexufo Youtube SpeedLoad plugin <= 0.6.3 versions.

CVE-2023-47718MEDIUMCVSS 4.3EG 4.3

2024-01-19

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru…

CVE-2023-47757MEDIUMCVSS 4.3EG 4.3

2023-11-17

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Const…

CVE-2023-47758MEDIUMCVSS 5.4EG 5.4

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.

CVE-2023-47765MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

CVE-2023-47775MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions.

CVE-2023-47781HIGHCVSS 8.8EG 8.8

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions.

CVE-2023-47785HIGHCVSS 7.1EG 7.1

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in LayerSlider plugin <= 7.7.9 versions.

CVE-2023-47787MEDIUMCVSS 4.3EG 4.3

2023-12-18

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Bookings: from n/a through 2.0.3.

CVE-2023-47789MEDIUMCVSS 4.3EG 4.3

2023-12-18

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3.

CVE-2023-47790HIGHCVSS 7.1EG 7.1

2023-11-23

Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2.4.8 versions.

CVE-2023-47791MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions.

CVE-2023-47792MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in Infinite Uploads Big File Uploads – Increase Maximum File Upload Size plugin <= 2.1.1 versions.

CVE-2023-47806MEDIUMCVSS 5.4EG 5.4

2023-12-18

Cross-Site Request Forgery (CSRF) vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7.

CVE-2023-47819MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin <= 1.1.0 versions.

CVE-2023-47824MEDIUMCVSS 5.4EG 5.4

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions.

CVE-2023-47825MEDIUMCVSS 4.3EG 4.3

2023-11-22

Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions.

CVE-2023-47845MEDIUMCVSS 4.3EG 4.3

2024-06-12

Cross-Site Request Forgery (CSRF) vulnerability in Lim Kai Yang Grab & Save.This issue affects Grab & Save: from n/a through 1.0.4.

CVE-2023-47870MEDIUMCVSS 5.7EG 7.1

2023-11-30

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functionality Not Properly Constrained by ACLs leading to forced all users log out.Thi…

CVE-2023-47875MEDIUMCVSS 5.4EG 5.4

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6.

CVE-2023-48017HIGHCVSS 8.8EG 8.8

2023-11-18

Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.

CVE-2023-48020HIGHCVSS 8.8EG 8.8

2023-11-14

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.

CVE-2023-48021HIGHCVSS 8.8EG 8.8

2023-11-14

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.

CVE-2023-48058HIGHCVSS 8.8EG 8.8

2023-11-13

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run

CVE-2023-48060HIGHCVSS 8.8EG 8.8

2023-11-13

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add

CVE-2023-48063MEDIUMCVSS 4.3EG 4.3

2023-11-13

An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.

CVE-2023-4824HIGHCVSS 8.8EG 8.8

2023-11-20

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVE-2023-48258MEDIUMCVSS 5.5EG 5.5

2024-01-10

The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session.

CVE-2023-4827HIGHCVSS 8.8EG 8.8

2023-10-16

The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using…

CVE-2023-48278HIGHCVSS 7.1EG 7.1

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha allows Stored XSS.This issue affects WP Forms Puzzle Captcha: from n/a through 4.1.

CVE-2023-48279MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.

CVE-2023-48281MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Super Blog Me Broken Link Checker for YouTube allows Cross Site Request Forgery.This issue affects Broken Link Checker for YouTube: from n/a through 1.3.

CVE-2023-48282MEDIUMCVSS 5.4EG 5.4

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio Taxonomy filter allows Cross Site Request Forgery.This issue affects Taxonomy filter: from n/a through 2.2.9.

CVE-2023-48283MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5.

CVE-2023-48284MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator – WooCommerce Email Customizer: from n/a through 1.2.7.

CVE-2023-48292CRITICALCVSS 9.6EG 9.6

2023-11-20

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the serv…

CVE-2023-48293HIGHCVSS 8.8EG 8.8

2023-11-20

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database…

CVE-2023-48323MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: f…

CVE-2023-48328MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37.

CVE-2023-48330MEDIUMCVSS 5.4EG 5.4

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Mike Strand Bulk Comment Remove allows Cross Site Request Forgery.This issue affects Bulk Comment Remove: from n/a through 2.

CVE-2023-48331MEDIUMCVSS 4.3EG 4.3

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4.

CVE-2023-48334MEDIUMCVSS 5.4EG 5.4

2023-11-30

Cross-Site Request Forgery (CSRF) vulnerability in DAEXT League Table allows Cross Site Request Forgery.This issue affects League Table: from n/a through 1.13.

CVE-2023-4837HIGHCVSS 8.8EG 8.8

2023-10-10

SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of …

CVE-2023-4865MEDIUMCVSS 4.3EG 4.3

2023-09-09

A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The expl…

CVE-2023-48651MEDIUMCVSS 4.3EG 4.3

2024-02-29

Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit.

CVE-2023-48652MEDIUMCVSS 4.3EG 4.3

2023-12-25

Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete_all/submit. An attacker can force an admin user to delete server report logs on a web application to which they are currentl…

CVE-2023-48653MEDIUMCVSS 4.3EG 4.3

2024-02-29

Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross Site Request Forgery (CSRF) via ccm/calendar/dialogs/event/delete/submit. An attacker can force an admin to delete events on the site because the event ID is numeric and sequential.

CVE-2023-4868MEDIUMCVSS 4.3EG 4.3

2023-09-10

A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery.…

CWE-352— Cross-Site Request Forgery (CSRF)

CVEs classified under CWE-352page 98 of 175

Map vulnerabilities like CWE-352 to your infrastructure