Vulnerability index

Browse CVEs

7,375 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Wordpress Mobile Pack MEDIUM 6.5
CVE-2023-37391

Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Ap…

Fix: after 3.4.1
Fix from $1,600 2023-07-11
Wp Rss Images HIGH 8.8
CVE-2023-36693

Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions.

Fix: after 1.1
Fix from $1,950 2023-07-11
Ruggedcom Rox Mx5000 Firmware HIGH 8.8
CVE-2022-29561

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX …

Fix: 2.16.0+
Fix from $1,950 2023-07-11
Advanced Free Flat Shipping Woocommerce HIGH 8.8
CVE-2023-34015

Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for Wo…

Fix: 1.6.4.6+
Fix from $1,950 2023-07-11
Lws Tools HIGH 8.8
CVE-2023-35774

Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions.

Fix: 2.4.2+
Fix from $1,950 2023-07-11
Oopspam Anti Spam HIGH 8.8
CVE-2023-35913

Cross-Site Request Forgery (CSRF) vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.44 versions.

Fix: 1.1.45+
Fix from $1,950 2023-07-11
Wp Abstracts HIGH 8.8
CVE-2023-36517

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

Fix: after 2.6.2
Fix from $1,950 2023-07-11
Comments Rating HIGH 8.8
CVE-2023-23704

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions.

Fix: 1.1.7+
Fix from $1,950 2023-07-11
Wishsuite HIGH 8.8
CVE-2023-23731

Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions.

Fix: 1.3.4+
Fix from $1,950 2023-07-11
Database Collation Fix HIGH 8.8
CVE-2023-23997

Cross-Site Request Forgery (CSRF) vulnerability in Dave Jesch Database Collation Fix plugin <= 1.2.7 versions.

Fix: 1.2.8+
Fix from $1,950 2023-07-11
Php Compatibility Checker HIGH 8.8
CVE-2023-24421

Cross-Site Request Forgery (CSRF) vulnerability in WP Engine PHP Compatibility Checker plugin <= 1.5.2 versions.

Fix: 1.6.0+
Fix from $1,950 2023-07-11
Comment Reply Notification HIGH 8.8
CVE-2023-25051

Cross-Site Request Forgery (CSRF) vulnerability in Denishua Comment Reply Notification plugin <= 1.4 versions.

Fix: after 1.4
Fix from $1,950 2023-07-11
Reservation.studio HIGH 8.8
CVE-2023-25468

Cross-Site Request Forgery (CSRF) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 versions.

Fix: after 1.0.11
Fix from $1,950 2023-07-11
Pixtypes HIGH 8.8
CVE-2023-25487

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade PixTypes plugin <= 1.4.14 versions.

Fix: 1.4.15+
Fix from $1,950 2023-07-11
Lws Cleaner HIGH 8.8
CVE-2023-35781

Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions.

Fix: 2.3.1+
Fix from $1,950 2023-07-11
Video Contest Wordpress HIGH 8.8
CVE-2022-45823

Cross-Site Request Forgery (CSRF) vulnerability in GalleryPlugins Video Contest WordPress plugin <= 3.2 versions.

Fix: after 3.2
Fix from $1,950 2023-07-11
Justtables HIGH 8.8
CVE-2023-23803

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes JustTables plugin <= 1.4.9 versions.

Fix: 1.5.0+
Fix from $1,950 2023-07-11
Ht Menu HIGH 8.8
CVE-2023-23791

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <= 1.2.1 versions.

Fix: 1.2.2+
Fix from $1,950 2023-07-11
Swatchly HIGH 8.8
CVE-2023-23792

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <= 1.2.0 versions.

Fix: 1.2.1+
Fix from $1,950 2023-07-11
Buy Me A Coffee HIGH 7.1
CVE-2023-2079

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on …

Fix: 3.8+
Fix from $1,950 2023-07-11
Xwiki CRITICAL 9.6
CVE-2023-37277

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions vi…

Fix: 14.10.8 / 15.2+
Fix from $2,300 2023-07-10
Hadsky HIGH 8.8
CVE-2023-3579

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the co…

No fix yet
Fix from $1,950 2023-07-10
Potent Donations For Woocommerce HIGH 8.8
CVE-2023-35912

Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions.

Fix: after 1.1.9
Fix from $1,950 2023-07-10
Webwinkelkeur HIGH 8.8
CVE-2023-36691

Cross-Site Request Forgery (CSRF) vulnerability in Albert Peschar WebwinkelKeur plugin <= 3.24 versions.

Fix: 3.25+
Fix from $1,950 2023-07-10
Wp Dummy Content Generator HIGH 8.8
CVE-2023-37392

Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions.

Fix: 3.0.0+
Fix from $1,950 2023-07-10
Affiliates Manager HIGH 8.8
CVE-2023-28986

Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions.

Fix: 2.9.21+
Fix from $1,950 2023-07-10
Happy Addons For Elementor HIGH 8.8
CVE-2023-28989

Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.

Fix: 3.8.3+
Fix from $1,950 2023-07-10
Configurable Tag Cloud HIGH 8.8
CVE-2023-28995

Cross-Site Request Forgery (CSRF) vulnerability in Keith Solomon Configurable Tag Cloud (CTC) plugin <= 5.2 versions.

Fix: 5.3+
Fix from $1,950 2023-07-10
Website Monetization HIGH 8.8
CVE-2023-22673

Cross-Site Request Forgery (CSRF) vulnerability in MageNet Website Monetization by MageNet plugin <= 1.0.29.1 versions.

Fix: after 1.0.29.1
Fix from $1,950 2023-07-10
Bigcontact Contact Page HIGH 8.8
CVE-2023-22694

Cross-Site Request Forgery (CSRF) vulnerability in Arian Khosravi, Norik Davtian BigContact Contact Page plugin <= 1.5.8 versions.

Fix: after 1.5.8
Fix from $1,950 2023-07-10