Weaknesses of type CWE-352
5,716 resultsCVE-2023-51354MEDIUMWordPress Webba Booking Plugin <= 4.5.33 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-49306MEDIUMWordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-4204MEDIUMBulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request ForgeryEPSS 0.2%CVE-2026-1468MEDIUMCross-Site Request Forgery in QuickCMSEPSS 0.2%CVE-2024-39153MEDIUMidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&datEPSS 0.2%CVE-2024-3945MEDIUMWP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()EPSS 0.2%CVE-2023-48790HIGHA cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and befEPSS 0.2%CVE-2023-5602MEDIUMSocial Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-68481MEDIUMFastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSOEPSS 0.2%CVE-2023-51402MEDIUMWordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-40332MEDIUMidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecordEPSS 0.2%CVE-2024-51686MEDIUMWordPress Manage User Columns plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-11020MEDIUMInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via aEPSS 0.2%CVE-2025-8335MEDIUMcode-projects Simple Car Rental System cross-site request forgeryEPSS 0.2%CVE-2024-52415HIGHWordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerabilityEPSS 0.2%CVE-2024-31369MEDIUMWordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-51486MEDIUMWordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-50878MEDIUMWordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2023-44999MEDIUMWordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-6341MEDIUMcode-projects School Fees Payment System cross-site request forgeryEPSS 0.2%