VYPR

CWE-352

Cross-Site Request Forgery (CSRF)

CompoundStableLikelihood: Medium

Description

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-111 · CAPEC-462 · CAPEC-467 · CAPEC-62

CVEs mapped to this weakness (9,607)

page 363 of 481
  • CVE-2023-37995MedOct 4, 2023
    WordPress
    WP-CopyProtect
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole WP-CopyProtect [Protect your blog posts] plugin <= 3.1.0 versions.

  • CVE-2023-25980MedOct 4, 2023
    Cage Web Design | Rolf Van Gelder
    Optimize Database After Deleting Revisions
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin <= 5.1 versions.

  • CVE-2023-25489MedOct 4, 2023
    Iwebss
    Update Theme And Plugins From Zip File
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 versions.

  • CVE-2023-41244MedOct 3, 2023
    Buildfail
    Localize Remote Images
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Buildfail Localize Remote Images plugin <= 1.0.9 versions.

  • CVE-2023-39158MedOct 3, 2023
    Multidots
    Banner Management For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions.

  • CVE-2023-40212MedOct 3, 2023
    Multidots
    Product Attachment For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions.

  • CVE-2023-39159MedOct 3, 2023
    Thedotstore
    Fraud Prevention For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.

  • CVE-2023-39917MedOct 3, 2023
    Ays Pro
    Photo Gallery
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.

  • CVE-2023-25989MedOct 3, 2023
    Mekshq
    Meks Smart Social Widget
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social…

  • CVE-2023-38398MedOct 3, 2023
    WordPress
    Taboola
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Taboola plugin <= 2.0.1 versions.

  • CVE-2023-38390MedOct 3, 2023
    Anshullabs
    Mobile Address Bar Changer
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Anshul Labs Mobile Address Bar Changer plugin <= 3.0 versions.

  • CVE-2023-37990MedOct 3, 2023
    Mike
    Perelink Pro
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Mike Perelink Pro plugin <= 2.1.4 versions.

  • CVE-2023-37998MedOct 3, 2023
    SaaS
    Disabler
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Saas Disabler allows Cross Site Request Forgery.This issue affects Disabler: from n/a through 3.0.3.

  • CVE-2023-37991MedOct 3, 2023
    Monchito
    Wp Emoji One
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Monchito.Net WP Emoji One plugin <= 0.6.0 versions.

  • CVE-2023-37891MedOct 3, 2023
    WordPress
    OptiMonk
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.0.4 versions.

  • CVE-2023-39286MedSep 14, 2023
    Mitel
    Connect Mobility Router
    risk 0.28cvss 4.3epss 0.00

    A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an…

  • CVE-2023-39285MedSep 14, 2023
    Mitel
    Mivoice Connect
    risk 0.28cvss 4.3epss 0.00

    A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an…

  • CVE-2023-4869MedSep 10, 2023
    Sourcecodester
    Contact Manager App
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The…

  • CVE-2023-4868MedSep 10, 2023
    Sourcecodester
    Contact Manager App
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely.…

  • CVE-2023-4865MedSep 9, 2023
    Sourcecodester
    Take-Note App
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and…