Fallos del tipo CWE-352
5725 resultadosCVE-2026-46786CRITICALVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that EPSS 0.2%CVE-2026-1153MEDIUMtechnical-laohu mpay cross-site request forgeryEPSS 0.2%CVE-2024-32448MEDIUMWordPress Ads.txt Admin plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-32436MEDIUMWordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-32102MEDIUMWordPress Crony Cronjob Manager plugin <= 0.5.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-1360MEDIUMColibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin InstallationEPSS 0.2%CVE-2024-32088MEDIUMWordPress Website Builder plugin <= 6.15.20 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-1362MEDIUMColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refreshEPSS 0.2%CVE-2024-32434MEDIUMWordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-30783HIGHWordPress WP Google Review Slider plugin <= 16.0 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2024-32099MEDIUMWordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerabilityEPSS 0.2%CVE-2024-32095MEDIUMWordPress MultiParcels Shipping For WooCommerce plugin < 1.16.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-42629MEDIUMFrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.EPSS 0.2%CVE-2024-32089MEDIUMWordPress Digital Publications by Supsystic plugin <= 1.7.7 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-30421MEDIUMWordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-32084MEDIUMWordPress Before And After plugin <= 3.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-0660MEDIUMFormidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-32249MEDIUMWordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-30518MEDIUMWordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-32247MEDIUMWordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%