Vulnerability index

Browse CVEs

7,373 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Migrate Queue Importer HIGH 8.8
CVE-2024-13260

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue i…

Fix: 2.1.1+
Fix from $1,950 2025-01-09
Migrate Tools HIGH 8.8
CVE-2024-13244

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.…

Fix: 6.0.3+
Fix from $1,950 2025-01-09
Drupal Symfony Mailer Lite HIGH 8.8
CVE-2024-13250

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symf…

Fix: 1.0.6+
Fix from $1,950 2025-01-09
Unclassified HIGH 7.1
CVE-2025-22814

Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This is…

No fix yet
Fix from $1,950 2025-01-09
Unclassified MEDIUM 6.1
CVE-2024-12218

The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ…

Mitigation only
Fix from $1,600 2025-01-09
Unclassified HIGH 7.1
CVE-2025-22589

Cross-Site Request Forgery (CSRF) vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through …

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22590

Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Prayer Times Anywhere prayer-times-anywhere allows Stored XSS.This issue affects Prayer Ti…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22582

Cross-Site Request Forgery (CSRF) vulnerability in Scott Nelle Uptime Robot uptime-robot allows Stored XSS.This issue affects Uptime Robot: from n/a …

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22571

Cross-Site Request Forgery (CSRF) vulnerability in instabot Instabot instabot allows Cross Site Request Forgery.This issue affects Instabot: from n/a…

No fix yet
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22559

Cross-Site Request Forgery (CSRF) vulnerability in tubepress TubePress.NET tubepressnet allows Cross Site Request Forgery.This issue affects TubePres…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22552

Cross-Site Request Forgery (CSRF) vulnerability in bnielsen Affiliate Disclosure Statement affiliate-disclosure-statement allows Cross Site Request F…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22555

Cross-Site Request Forgery (CSRF) vulnerability in njshofe Smoothness Slider Shortcode smoothness-slider-shortcode allows Cross Site Request Forgery.…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22556

Cross-Site Request Forgery (CSRF) vulnerability in WP CMS Ninja Norse Rune Oracle Plugin norse-runes-oracle allows Cross Site Request Forgery.This is…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22557

Cross-Site Request Forgery (CSRF) vulnerability in cdowp News Publisher Autopilot wpm-news-api allows Cross Site Request Forgery.This issue affects N…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22538

Cross-Site Request Forgery (CSRF) vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a thro…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22520

Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: fro…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22328

Cross-Site Request Forgery (CSRF) vulnerability in Elevio by Dixa Elevio elevio allows Stored XSS.This issue affects Elevio: from n/a through <= 4.4.…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22336

Cross-Site Request Forgery (CSRF) vulnerability in Amos Lee(一刀) Wizhi Multi Filters by Wenprise wizhi-multi-filters allows Stored XSS.This issue …

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22342

Cross-Site Request Forgery (CSRF) vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: …

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22343

Cross-Site Request Forgery (CSRF) vulnerability in koter84 wpSOL wpsol allows Stored XSS.This issue affects wpSOL: from n/a through <= 1.2.0.

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 8.2
CVE-2025-22347

Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue aff…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified HIGH 7.1
CVE-2025-22325

Cross-Site Request Forgery (CSRF) vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a …

Mitigation only
Fix from $1,950 2025-01-07
Unclassified MEDIUM 5.4
CVE-2025-22300

Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Cross Site Reque…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified MEDIUM 5.4
CVE-2025-22301

Cross-Site Request Forgery (CSRF) vulnerability in zookatron MyBookTable Bookstore mybooktable allows Cross Site Request Forgery.This issue affects M…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified MEDIUM 6.1
CVE-2024-12383

The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified HIGH 8.8
CVE-2024-12322

The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is d…

Mitigation only
Fix from $1,950 2025-01-07
Unclassified MEDIUM 6.1
CVE-2024-12288

The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is d…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified MEDIUM 6.1
CVE-2024-12291

The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.17. This is due to missin…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified MEDIUM 5.4
CVE-2024-12170

The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missin…

Mitigation only
Fix from $1,600 2025-01-07
Unclassified MEDIUM 5.4
CVE-2024-12541

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is…

Mitigation only
Fix from $1,600 2025-01-07