Weaknesses of type CWE-352
5,725 resultsCVE-2024-26450MEDIUMAn issue exists within Piwigo before v.14.2.0 allowing a malicious user to take over the application. This exploit involves chaining a CrossEPSS 0.2%CVE-2025-57902MEDIUMWordPress RIS Version Switcher – Downgrade or Upgrade WP Versions Easily Plugin <= 1.0 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-54220HIGHCross-Site Request Forgery in UBB.threadsEPSS 0.2%CVE-2026-6401MEDIUMBottom Bar <= 0.1.7 - Cross-Site Request Forgery to Settings UpdateEPSS 0.2%CVE-2023-4000MEDIUMWaiting: One-click countdowns <= 0.6.2 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-21507MEDIUMVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are EPSS 0.2%CVE-2025-21526MEDIUMVulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccEPSS 0.2%CVE-2024-27194HIGHWordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerabilityEPSS 0.2%CVE-2024-2964MEDIUMPocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings UpdateEPSS 0.2%CVE-2024-52479MEDIUMWordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-22347HIGHWordPress BSK Forms Blacklist plugin <= 3.9 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2026-11270MEDIUMInappropriate implementation in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data viEPSS 0.2%CVE-2024-24705MEDIUMWordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-30460MEDIUMWordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-24555HIGHWordPress Subscription DNA plugin <= 2.1 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2023-45269MEDIUMWordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-60208HIGHWordPress Advanced Custom Fields : CPT Options Pages plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-25905MEDIUMWordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-9891MEDIUMUser Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin DeactivationEPSS 0.2%CVE-2025-30804MEDIUMWordPress wpShopGermany IT-RECHT KANZLEI plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%