Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a d…
Keycloak
HIGH 8.8
It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw t…
Custom Sidebars
HIGH 8.8
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
Custom Sidebars
HIGH 8.8
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
Newsletter By Supsystic
HIGH 8.8
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
Responsive Menu
HIGH 8.8
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
Import All Pages\, Post Types\, Products\, Orders\, And Users As Xml \& Csv
HIGH 8.8
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
Ultimate Exporter
HIGH 8.8
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
Simple Fields
HIGH 8.8
The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.
Wp Maps
HIGH 8.8
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
Wp Maps
HIGH 8.8
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
Wp Maps
HIGH 8.8
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
Google Doc Embedder
HIGH 8.8
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.
Simple Add Pages Or Posts
MEDIUM 6.5
The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.
Simple Membership
HIGH 8.8
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
Wp Editor
HIGH 8.8
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contain…
Contact Form Email
HIGH 8.8
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
Twitter Cards Meta
HIGH 8.8
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
Wp Database Backup
HIGH 8.8
The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
Wp Database Backup
HIGH 8.8
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
Bagisto 0.1.5 allows CSRF under /admin URIs.
Lightbox Plus Colorbox
MEDIUM 6.1
The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery (CSRF) via wp-admin/admin.php?page=lightboxplus, as demo…
Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page.
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.
Cognitoys Dino devices allow profiles_add.html CSRF.
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
Import Users From Csv With Meta
MEDIUM 5.7
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSR…
Arprice Lite
MEDIUM 6.5
core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.
Admin Renamer Extended
MEDIUM 5.7
The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/admin.php …