Falhas do tipo CWE-352

5.723 resultados
CVE-2024-54139HIGHCombodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameterEPSS 0.2%CVE-2024-37306HIGHCVAT's export and backup-related API endpoints are susceptible to CSRFEPSS 0.2%CVE-2024-13883MEDIUMWPUpper Share Buttons <= 3.51 - Cross-Site Request Forgery to Custom CSS UpdateEPSS 0.2%CVE-2024-51654HIGHWordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-51650HIGHWordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-5534MEDIUMAI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actionsEPSS 0.2%CVE-2025-52841HIGHLaundry 2.3.0 - Account Takeover via CSRFEPSS 0.2%CVE-2024-51655HIGHWordPress Custom Author URL plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-47182HIGHWordPress Login Screen Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.2%CVE-2024-51656HIGHWordPress Flash Show And Hide Box plugin <= 1.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-51644HIGHWordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-54418MEDIUMWordPress DTC Documents plugin <= 1.1.05 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-51648HIGHWordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-51642HIGHWordPress Seo Free plugin <= 1.4 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-51645HIGHWordPress ThemeFuse Maintenance Mode plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-2416MEDIUMCross-Site Request Forgery vulnerability in Movistar 4G routerEPSS 0.2%CVE-2025-14117MEDIUMfit2cloud Halo cross-site request forgeryEPSS 0.2%CVE-2024-51643HIGHWordPress Amazon Associate Filter plugin <= 0.4 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-22438LOWHPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-51652HIGHWordPress Skip To plugin <= 2.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%