Falhas do tipo CWE-352

5.711 resultados
CVE-2023-27444MEDIUMWordPress DecaLog Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-25986MEDIUMWordPress PayGreen Plugin <= 4.10.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-34182MEDIUMWordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-5382MEDIUMFunnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post DeletionEPSS 0.3%CVE-2023-31086MEDIUMWordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-25994MEDIUMWordPress Publish to Schedule Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2022-1956—Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings UpdateEPSS 0.3%CVE-2024-1889HIGHCross-Site Request Forgery vulnerability in SMA Cluster ControllerEPSS 0.3%CVE-2023-0870HIGHForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)EPSS 0.3%CVE-2022-4766MEDIUMdolibarr_project_timesheet Form cross-site request forgeryEPSS 0.3%CVE-2023-48284MEDIUMWordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2016-3098—Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorizEPSS 0.3%CVE-2022-40179—A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), DEPSS 0.3%CVE-2024-27783HIGHMultiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remoEPSS 0.3%CVE-2023-47781HIGHWordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-11415HIGHWP-Orphanage Extended <= 1.2 - Cross-Site Request Forgery to Orphan Account Privilege EscalationEPSS 0.3%CVE-2023-28694MEDIUMWordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2021-24912—Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSSEPSS 0.3%CVE-2023-0737MEDIUMCSRF in wallabag/wallabagEPSS 0.3%CVE-2025-24223HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOEPSS 0.3%