Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the r…
Democracy Poll
HIGH 8.8
The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
Wp Customer Reviews
HIGH 8.8
The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.
Godaddy Email Marketing
HIGH 8.8
The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.
IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitte…
IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized act…
Eelv Newsletter
HIGH 8.8
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
My Wp Translate
HIGH 8.8
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
Cformsii
HIGH 8.8
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
User Access Manager
HIGH 8.8
The user-access-manager plugin before 1.2 for WordPress has CSRF.
User Domain Whitelist
HIGH 8.8
The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.
Wordpress Uninstall
MEDIUM 6.5
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
Add From Server
HIGH 8.8
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.
Popup
HIGH 8.8
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator i…
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callb…
Companion Sitemap Generator
HIGH 8.8
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
Formcraft
HIGH 8.8
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.
Loginwp
HIGH 8.8
The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.
Nelio Ab Testing
HIGH 8.8
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
Church Admin
HIGH 8.8
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
Companion Auto Update
HIGH 8.8
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
Js Job Manager
HIGH 8.8
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
Erident Custom Login And Dashboard
HIGH 8.8
The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.
Invite Anyone
HIGH 8.8
The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
Jayj Quicktag
HIGH 8.8
The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.
In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that ha…
In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "default_database" fields which led to Cr…
An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element (containing a user/card.php CSRF request) in his Linked Files se…
Wp Svg Icons
HIGH 8.8
An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-cus…