Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Breadcrumbs By Menu
HIGH 8.8
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
Affiliates Manager
HIGH 8.8
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
Webp Converter For Media
HIGH 8.8
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
Wp Better Permalinks
HIGH 8.8
The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
Facebook For Woocommerce
HIGH 8.8
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
Facebook For Woocommerce
HIGH 8.8
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_f…
One Click Ssl
HIGH 8.8
The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.
Visitor Traffic Real Time Statistics
HIGH 8.8
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
Visitor Traffic Real Time Statistics
HIGH 8.8
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
Photo Gallery
HIGH 8.8
The photo-gallery plugin before 1.2.42 for WordPress has CSRF.
Wp Social Feed Gallery
HIGH 8.8
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
Social Likebox \& Feed
HIGH 8.8
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
Handl Utm Grabber
HIGH 8.8
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.
Woocommerce Address Book
HIGH 8.8
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
Various Lexmark products have CSRF.
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the ad…
Jenkins
HIGH 8.8
Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens…
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-a…
Wp Members
HIGH 8.8
The wp-members plugin before 3.2.8 for WordPress has CSRF.
Insert Or Embed Articulate Content
MEDIUM 6.5
The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a …
Js Help Desk
HIGH 8.8
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
Bbpress Move Topics
HIGH 8.8
The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
Salesiq
HIGH 8.8
The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.
Wp Rollback
HIGH 8.8
The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
Discourse 2.3.2 sends the CSRF token in the query string.
Jira
MEDIUM 6.5
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 bef…
openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.
Import Users From Csv With Meta
HIGH 8.8
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
Photo Gallery
HIGH 8.8
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
Ios Xe
HIGH 8.8
A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remot…