Vulnerability index

Browse CVEs

7,375 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Tr 71w Firmware HIGH 8.8
CVE-2023-27387

Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an …

Mitigation only
Fix from $1,950 2023-05-23
A300 Firmware HIGH 8.8
CVE-2023-2505

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files.

No fix yet
Fix from $1,950 2023-05-22
Colorway HIGH 8.8
CVE-2023-25447

Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.

Fix: after 4.2.3
Fix from $1,950 2023-05-22
Archivist HIGH 8.8
CVE-2023-25448

Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.

Fix: after 1.7.4
Fix from $1,950 2023-05-22
Auto Youtube Importer HIGH 8.8
CVE-2023-23797

Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions.

Fix: 1.0.4+
Fix from $1,950 2023-05-22
Stylist HIGH 8.8
CVE-2022-47183

Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions.

Fix: after 0.2.6
Fix from $1,950 2023-05-22
Hover Image HIGH 8.8
CVE-2022-47611

Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m Hover Image plugin <= 1.4.1 versions.

Fix: after 1.4.1
Fix from $1,950 2023-05-22
Loginizer HIGH 8.8
CVE-2022-45079

Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

Fix: 1.7.6+
Fix from $1,950 2023-05-22
Side Cart Woocommerce HIGH 8.8
CVE-2022-45376

Cross-Site Request Forgery (CSRF) vulnerability in XootiX Side Cart Woocommerce (Ajax) < 2.1 versions.

Fix: 2.1+
Fix from $1,950 2023-05-22
Crayon Syntax Highlighter HIGH 8.8
CVE-2022-47167

Cross-Site Request Forgery (CSRF) vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin <= 2.8.4 versions.

Fix: after 2.8.4
Fix from $1,950 2023-05-22
Quick Restaurant Reservations CRITICAL 9.8
CVE-2022-44739

Cross-Site Request Forgery (CSRF) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.5.4 versions.

Fix: 1.5.5+
Fix from $2,300 2023-05-22
Flexible Elementor Panel HIGH 8.8
CVE-2022-45076

Cross-Site Request Forgery (CSRF) vulnerability in WebMat Flexible Elementor Panel plugin <= 2.3.8 versions.

Fix: 2.3.9+
Fix from $1,950 2023-05-22
Asgaros Forum HIGH 8.8
CVE-2022-41608

Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum plugin <= 2.2.0 versions.

Fix: 2.3.0+
Fix from $1,950 2023-05-22
Dnui Delete Not Used Image HIGH 8.8
CVE-2022-47609

Cross-Site Request Forgery (CSRF) vulnerability in Nicearma DNUI plugin <= 2.8.1 versions.

Fix: after 2.8.1
Fix from $1,950 2023-05-22
Wp Tabs Slides HIGH 8.8
CVE-2023-22688

Cross-Site Request Forgery (CSRF) vulnerability in Abdul Ibad WP Tabs Slides plugin <= 2.0.3 versions.

Fix: after 2.0.3
Fix from $1,950 2023-05-22
Name Directory HIGH 8.8
CVE-2023-22692

Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions.

Fix: after 1.27.1
Fix from $1,950 2023-05-22
Srs Simple Hits Counter HIGH 8.8
CVE-2023-22709

Cross-Site Request Forgery (CSRF) vulnerability in Atif N SRS Simple Hits Counter plugin <= 1.1.0 versions.

Fix: after 1.1.0
Fix from $1,950 2023-05-22
Coming Soon HIGH 8.8
CVE-2023-22714

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.

Fix: after 1.7.10
Fix from $1,950 2023-05-22
Wp Topbar HIGH 8.8
CVE-2023-23680

Cross-Site Request Forgery (CSRF) vulnerability in Bob Goetz WP-TopBar plugin <= 5.36 versions.

Fix: after 5.36
Fix from $1,950 2023-05-22
User Meta Manager HIGH 8.8
CVE-2023-23712

Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions.

Fix: after 3.4.9
Fix from $1,950 2023-05-22
My Calendar HIGH 8.8
CVE-2023-23813

Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions.

Fix: after 3.4.3
Fix from $1,950 2023-05-22
Media Library Folders HIGH 8.8
CVE-2022-47142

Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions.

Fix: after 2.8.1
Fix from $1,950 2023-05-22
Gallery Metabox HIGH 8.8
CVE-2022-47134

Cross-Site Request Forgery (CSRF) vulnerability in Bill Erickson Gallery Metabox plugin <= 1.5 versions.

Fix: after 1.5
Fix from $1,950 2023-05-20
Auto Affiliate Links HIGH 8.8
CVE-2023-22689

Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3 versions.

Fix: after 6.3
Fix from $1,950 2023-05-20
Wp Airbnb Review Slider HIGH 8.8
CVE-2023-23890

Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions.

Fix: after 3.2
Fix from $1,950 2023-05-20
Robogallery HIGH 8.8
CVE-2023-24414

Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.11 versions.

Fix: after 3.2.11
Fix from $1,950 2023-05-20
Dyslexiefont Free HIGH 8.8
CVE-2023-32589

Cross-Site Request Forgery (CSRF) vulnerability in PingOnline Dyslexiefont Free plugin <= 1.0.0 versions.

Fix: after 1.0.0
Fix from $1,950 2023-05-20
Groundhogg HIGH 8.0
CVE-2023-2736

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing non…

Fix: after 2.7.9.8
Fix from $1,950 2023-05-20
Shoppable Images HIGH 8.8
CVE-2023-25698

Cross-Site Request Forgery (CSRF) vulnerability in Studio Wombat Shoppable Images plugin <= 1.2.3 versions.

Fix: 1.2.4+
Fix from $1,950 2023-05-18
Auto Prune Posts HIGH 8.8
CVE-2023-27423

Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Auto Prune Posts plugin <= 1.8.0 versions.

Fix: 2.0.0+
Fix from $1,950 2023-05-18