Vulnerability index

Browse CVEs

7,366 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Unclassified HIGH 7.1
CVE-2025-58844

Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.This issue affects Database to…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58845

Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: f…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58846

Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish an…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58847

Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue affects WN Flipbox Pro: from…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58848

Cross-Site Request Forgery (CSRF) vulnerability in aakash1911 WP likes wp-likes allows Reflected XSS.This issue affects WP likes: from n/a through <=…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58843

Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video auto-last-youtube-video allows Stored XSS.This issue affects…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 8.8
CVE-2025-58833

Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects …

Mitigation only
Fix from $1,950 2025-09-05
Unclassified MEDIUM 5.4
CVE-2025-58818

Cross-Site Request Forgery (CSRF) vulnerability in SwiftNinjaPro Developer Tools Blocker swiftninjapro-inspect-element-console-blocker allows Cross S…

Mitigation only
Fix from $1,600 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58807

Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache purge-varnish allows Stored XSS.This issue affects Purge Varnish Cache:…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58809

Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows Reflected XSS.This issue aff…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified MEDIUM 5.4
CVE-2025-58801

Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a t…

Mitigation only
Fix from $1,600 2025-09-05
Unclassified HIGH 7.1
CVE-2025-58806

Cross-Site Request Forgery (CSRF) vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects W…

Mitigation only
Fix from $1,950 2025-09-05
Unclassified MEDIUM 5.3
CVE-2025-9616

The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or inc…

Mitigation only
Fix from $1,600 2025-09-04
Unified Communications Manager HIGH 8.8
CVE-2025-20326

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Mana…

Fix: 15su3+
Fix from $1,950 2025-09-03
Unclassified HIGH 8.6
CVE-2025-0610

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.05.06 bef…

Mitigation only
Fix from $1,950 2025-09-01
Koillection HIGH 8.8
CVE-2025-9747

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controllers/csrf_protection_controller…

Fix: 1.7.0+
Fix from $1,950 2025-08-31
Unclassified HIGH 7.1
CVE-2025-48359

Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget att-youtube allows Stored XSS.This issue affects ATT YouTube Widget…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified MEDIUM 5.4
CVE-2025-48362

Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This i…

Mitigation only
Fix from $1,600 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48353

Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified MEDIUM 5.4
CVE-2025-48357

Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Request Forgery.This issue affects…

Mitigation only
Fix from $1,600 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48351

Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Sp…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48325

Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme wp-admin-theme allows Stored XSS.This issue affects WP Admin Theme: from …

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48343

Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication wpmuldap allows Stored XSS.This issue affects WPMU Ldap Aut…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48321

Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This iss…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48320

Cross-Site Request Forgery (CSRF) vulnerability in cuckoohello 百度分享按钮 baidushare-wp allows Stored XSS.This issue affects 百度分享按钮: from n/a…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48311

Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: fr…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48307

Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from …

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48308

Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allo…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48309

Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through <= 1.0.…

Mitigation only
Fix from $1,950 2025-08-28
Unclassified HIGH 7.1
CVE-2025-48109

Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through …

Mitigation only
Fix from $1,950 2025-08-28