Cross-Site Request Forgery (CSRF) — CVEs by weakness type

Country Access Limit HIGH 8.8

CVE-2023-45641

Cross-Site Request Forgery (CSRF) vulnerability in Caret Inc. Caret Country Access Limit plugin <= 1.0.2 versions.

Fix: after 1.0.2

Fix from $1,950 2023-10-16

Snap Pixel HIGH 8.8

CVE-2023-45642

Cross-Site Request Forgery (CSRF) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.

Fix: after 1.5.7

Fix from $1,950 2023-10-16

Cpt Shortcode Generator HIGH 8.8

CVE-2023-45643

Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions.

Fix: after 1.0

Fix from $1,950 2023-10-16

Open Street Map HIGH 8.8

CVE-2023-45645

Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions.

Fix: after 1.25

Fix from $1,950 2023-10-16

Constant Contact Forms HIGH 8.8

CVE-2023-45647

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions.

Fix: after 2.0.10

Fix from $1,950 2023-10-16

Eupago Gateway Woocommerce HIGH 8.8

CVE-2023-45638

Cross-Site Request Forgery (CSRF) vulnerability in euPago Eupago Gateway For Woocommerce plugin <= 3.1.9 versions.

Fix: after 3.1.9

Fix from $1,950 2023-10-16

Html5 Maps HIGH 8.8

CVE-2023-45650

Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com HTML5 Maps plugin <= 1.7.1.4 versions.

Fix: after 1.7.1.4

Fix from $1,950 2023-10-16

Wp Attachments HIGH 8.8

CVE-2023-45651

Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: f…

Fix: after 5.0.6

Fix from $1,950 2023-10-16

Video Playlist For Youtube HIGH 8.8

CVE-2023-45653

Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.

Fix: after 6.0

Fix from $1,950 2023-10-16

Comments Rating HIGH 8.8

CVE-2023-45654

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.

Fix: after 1.1.7

Fix from $1,950 2023-10-16

Pixfields HIGH 8.8

CVE-2023-45655

Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions.

Fix: after 0.7.0

Fix from $1,950 2023-10-16

Lazy Load For Videos HIGH 8.8

CVE-2023-45656

Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <= 2.18.2 versions.

Fix: after 2.18.2

Fix from $1,950 2023-10-16

Stout Google Calendar HIGH 8.8

CVE-2023-45273

Cross-Site Request Forgery (CSRF) vulnerability in Matt McKenny Stout Google Calendar plugin <= 1.2.3 versions.

Fix: after 1.2.3

Fix from $1,950 2023-10-16

Free Web Push HIGH 8.8

CVE-2023-45274

Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.

Fix: after 1.3.1

Fix from $1,950 2023-10-16

Feed Statistics HIGH 8.8

CVE-2023-45605

Cross-Site Request Forgery (CSRF) vulnerability in Christopher Finke Feed Statistics plugin <= 4.1 versions.

Fix: after 4.1

Fix from $1,950 2023-10-16

Simple Urls HIGH 8.8

CVE-2023-45606

Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions.

Fix: after 120

Fix from $1,950 2023-10-16

Gallery Image And Video Gallery With Thumbnails HIGH 8.8

CVE-2023-45629

Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions.

Fix: after 2.0.3

Fix from $1,950 2023-10-16

Automated Editor HIGH 8.8

CVE-2023-45276

Cross-Site Request Forgery (CSRF) vulnerability in automatededitor.Com Automated Editor plugin <= 1.3 versions.

Fix: after 1.3

Fix from $1,950 2023-10-13

Simple Seo MEDIUM 5.4

CVE-2023-45269

Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 2.0.25 versions.

Fix: 2.0.26+

Fix from $1,600 2023-10-13

Pinpoint Booking System HIGH 8.8

CVE-2023-45270

Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions.

Fix: after 2.9.9.4.0

Fix from $1,950 2023-10-13

Irivyou HIGH 8.8

CVE-2023-45267

Cross-Site Request Forgery (CSRF) vulnerability in Zizou1988 IRivYou plugin <= 2.2.1 versions.

Fix: after 2.2.1

Fix from $1,950 2023-10-13

Hitsteps Web Analytics HIGH 8.8

CVE-2023-45268

Cross-Site Request Forgery (CSRF) vulnerability in Hitsteps Hitsteps Web Analytics plugin <= 5.86 versions.

Fix: after 5.86

Fix from $1,950 2023-10-13

Whitepage HIGH 8.8

CVE-2023-45109

Cross-Site Request Forgery (CSRF) vulnerability in ZAKSTAN WhitePage plugin <= 1.1.5 versions.

Fix: after 1.1.5

Fix from $1,950 2023-10-13

Goodbarber HIGH 8.8

CVE-2023-45107

Cross-Site Request Forgery (CSRF) vulnerability in GoodBarber plugin <= 1.0.22 versions.

Fix: after 1.0.22

Fix from $1,950 2023-10-13

Mailrelay HIGH 8.8

CVE-2023-45108

Cross-Site Request Forgery (CSRF) vulnerability in Mailrelay plugin <= 2.1.1 versions.

Fix: after 2.1.1

Fix from $1,950 2023-10-13

Spa Cart HIGH 8.1

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.

No fix yet

Fix from $1,950 2023-10-12

Spa Cart HIGH 8.8

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.

No fix yet

Fix from $1,950 2023-10-12

Limo Booking Software HIGH 8.8

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index…

No fix yet

Fix from $1,950 2023-10-12

Blog Manager Light HIGH 8.8

CVE-2023-45102

Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Blog Manager Light plugin <= 1.20 versions.

Fix: after 1.20

Fix from $1,950 2023-10-12

Permalinks Customizer HIGH 8.8

CVE-2023-45103

Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Permalinks Customizer plugin <= 2.8.2 versions.

Fix: after 2.8.2

Fix from $1,950 2023-10-12

Browse CVEs