VYPR

CWE-352

Cross-Site Request Forgery (CSRF)

CompoundStableLikelihood: Medium

Description

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-111 · CAPEC-462 · CAPEC-467 · CAPEC-62

CVEs mapped to this weakness (9,622)

page 253 of 482
  • CVE-2023-39923MedOct 3, 2023
    Radiustheme
    The Post Grid
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.

  • CVE-2023-39165MedOct 3, 2023
    Fetchdesigns
    Sign Up Sheets
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.

  • CVE-2023-2830MedOct 3, 2023
    Trustindex
    Wp Testimonials
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.

  • CVE-2023-38396MedOct 3, 2023
    Web Argument
    Google Map Shortcode
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.

  • CVE-2023-25463MedOct 3, 2023
    Gopiplus
    Wp Tell A Friend Popup Form
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.

  • CVE-2022-46841MedOct 3, 2023
    Soflyy
    Oxygen
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.

  • CVE-2023-38381MedOct 3, 2023
    WordPress
    WP-FlyBox
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-FlyBox plugin <= 6.46 versions.

  • CVE-2023-37996MedOct 3, 2023
    Gtmetrix
    Gtmetrix
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions.

  • CVE-2023-37992MedOct 3, 2023
    Presspage
    Smarty For Wordpress
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.

  • CVE-2023-2279MedAug 31, 2023
    WordPress
    Wp Directory Kit
    risk 0.35cvss 5.4epss 0.00

    The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the 'admin_page_display' function. This makes it possible for unauthenticated attackers to…

  • CVE-2023-4455MedAug 21, 2023
    Walla Telesite
    Wallabag/wallabag
    risk 0.35cvss 6.5epss 0.00

    Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.

  • CVE-2023-38512MedJul 27, 2023
    Wpstream
    Wpstream
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream wpstream allows Cross Site Request Forgery.This issue affects WpStream: from n/a through <= 4.5.4.

  • CVE-2023-37973MedJul 18, 2023
    David Pokorny
    Replace Word
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in David Pokorny Replace Word plugin <= 2.1 versions.

  • CVE-2023-37387MedJul 18, 2023
    Radiustheme
    Classified Listing
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <= 2.4.5 versions.

  • CVE-2023-37386MedJul 18, 2023
    Codexin
    Media Library Helper
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Media Library Helper plugin <= 1.2.0 versions.

  • CVE-2023-25473MedJul 18, 2023
    Flickr Justified Gallery Project
    Flickr Justified Gallery
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Miro Mannino Flickr Justified Gallery plugin <= 3.5 versions.

  • CVE-2023-37974MedJul 17, 2023
    Justin Klein
    Wp Social Autoconnect
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Justin Klein WP Social AutoConnect plugin <= 4.6.1 versions.

  • CVE-2023-37968MedJul 17, 2023
    Faboba
    Falang
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage for WordPress plugin <= 1.3.39 versions.

  • CVE-2023-36513MedJul 17, 2023
    WooCommerce
    Automatewoo
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.

  • CVE-2023-35880MedJul 17, 2023
    WooCommerce
    Brands
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.