Falhas do tipo CWE-352

5.724 resultados
CVE-2024-54386HIGHWordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-1976MEDIUMMarketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-29093MEDIUMWordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-6959HIGHDenial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webuiEPSS 0.2%CVE-2024-54434HIGHWordPress phZoom plugin <= 1.2.92 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-1909MEDIUMCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategoryEPSS 0.2%CVE-2024-54411HIGHWordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.2%CVE-2024-54415HIGHWordPress WP-HideThat plugin <= 1.2 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.2%CVE-2024-54432HIGHWordPress WP Flipkart Importer plugin <= 1.4 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-54413HIGHWordPress Display Future Posts plugin <= 0.2.3 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.2%CVE-2024-4543MEDIUMSnippet Shortcodes <= 4.1.4 - Cross-Site Request ForgeryEPSS 0.2%CVE-2024-54433HIGHWordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-54435HIGHWordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-54427HIGHWordPress Category of Posts plugin <= 1.0 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-1910MEDIUMCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategoryEPSS 0.2%CVE-2026-33373HIGHAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery (CSRF) vulnerability exists in Zimbra Web EPSS 0.2%CVE-2024-1912MEDIUMCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPositionEPSS 0.2%CVE-2024-54440HIGHWordPress WP-Ban-User plugin <= 1.0 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2024-54414HIGHWordPress Geoportail Shortcode plugin <= 2.4.4 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.2%CVE-2024-1907MEDIUMCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategoryEPSS 0.2%