Browse CVEs

HIGH 8.8 CVE-2024-13260 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue i… Migrate Queue Importer 2.1.1+ Fix from $1,9502025-01-09 HIGH 8.8 CVE-2024-13244 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.… Migrate Tools 6.0.3+ Fix from $1,9502025-01-09 HIGH 8.8 CVE-2024-13250 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symf… Drupal Symfony Mailer Lite 1.0.6+ Fix from $1,9502025-01-09 HIGH 7.1 CVE-2025-22814 Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This is… No fix yet Fix from $1,9502025-01-09 MEDIUM 6.1 CVE-2024-12218 The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ… Mitigation only Fix from $1,6002025-01-09 HIGH 7.1 CVE-2025-22589 Cross-Site Request Forgery (CSRF) vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through … Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22590 Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Prayer Times Anywhere prayer-times-anywhere allows Stored XSS.This issue affects Prayer Ti… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22582 Cross-Site Request Forgery (CSRF) vulnerability in Scott Nelle Uptime Robot uptime-robot allows Stored XSS.This issue affects Uptime Robot: from n/a … Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22571 Cross-Site Request Forgery (CSRF) vulnerability in instabot Instabot instabot allows Cross Site Request Forgery.This issue affects Instabot: from n/a… No fix yet Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22559 Cross-Site Request Forgery (CSRF) vulnerability in tubepress TubePress.NET tubepressnet allows Cross Site Request Forgery.This issue affects TubePres… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22552 Cross-Site Request Forgery (CSRF) vulnerability in bnielsen Affiliate Disclosure Statement affiliate-disclosure-statement allows Cross Site Request F… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22555 Cross-Site Request Forgery (CSRF) vulnerability in njshofe Smoothness Slider Shortcode smoothness-slider-shortcode allows Cross Site Request Forgery.… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22556 Cross-Site Request Forgery (CSRF) vulnerability in WP CMS Ninja Norse Rune Oracle Plugin norse-runes-oracle allows Cross Site Request Forgery.This is… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22557 Cross-Site Request Forgery (CSRF) vulnerability in cdowp News Publisher Autopilot wpm-news-api allows Cross Site Request Forgery.This issue affects N… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22538 Cross-Site Request Forgery (CSRF) vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a thro… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22520 Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: fro… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22328 Cross-Site Request Forgery (CSRF) vulnerability in Elevio by Dixa Elevio elevio allows Stored XSS.This issue affects Elevio: from n/a through <= 4.4.… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22336 Cross-Site Request Forgery (CSRF) vulnerability in Amos Lee（一刀） Wizhi Multi Filters by Wenprise wizhi-multi-filters allows Stored XSS.This issue … Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22342 Cross-Site Request Forgery (CSRF) vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: … Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22343 Cross-Site Request Forgery (CSRF) vulnerability in koter84 wpSOL wpsol allows Stored XSS.This issue affects wpSOL: from n/a through <= 1.2.0. Mitigation only Fix from $1,9502025-01-07 HIGH 8.2 CVE-2025-22347 Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue aff… Mitigation only Fix from $1,9502025-01-07 HIGH 7.1 CVE-2025-22325 Cross-Site Request Forgery (CSRF) vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a … Mitigation only Fix from $1,9502025-01-07 MEDIUM 5.4 CVE-2025-22300 Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Cross Site Reque… Mitigation only Fix from $1,6002025-01-07 MEDIUM 5.4 CVE-2025-22301 Cross-Site Request Forgery (CSRF) vulnerability in zookatron MyBookTable Bookstore mybooktable allows Cross Site Request Forgery.This issue affects M… Mitigation only Fix from $1,6002025-01-07 MEDIUM 6.1 CVE-2024-12383 The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to… Mitigation only Fix from $1,6002025-01-07 HIGH 8.8 CVE-2024-12322 The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is d… Mitigation only Fix from $1,9502025-01-07 MEDIUM 6.1 CVE-2024-12288 The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is d… Mitigation only Fix from $1,6002025-01-07 MEDIUM 6.1 CVE-2024-12291 The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.17. This is due to missin… Mitigation only Fix from $1,6002025-01-07 MEDIUM 5.4 CVE-2024-12170 The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missin… Mitigation only Fix from $1,6002025-01-07 MEDIUM 5.4 CVE-2024-12541 The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is… Mitigation only Fix from $1,6002025-01-07