Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-352 (跨站请求伪造(CSRF)) — Vulnerability Class 4754

4754 vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-32092 WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF) — Community by PeepSo – Social Network, Membership, Registration, User Profiles 4.3 Medium2023-11-09
CVE-2023-32093 WordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF) — TPG Redirect 5.4 Medium2023-11-09
CVE-2023-32125 WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF) — Multi Rating 4.3 Medium2023-11-09
CVE-2023-32500 WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF) — WoodMart - Multipurpose WooCommerce Theme 5.4 Medium2023-11-09
CVE-2023-32501 WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) — VikBooking Hotel Booking Engine & PMS 4.3 Medium2023-11-09
CVE-2023-32502 WordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF) — Pro Mime Types – Manage file media types 4.3 Medium2023-11-09
CVE-2023-32512 WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF) — ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization 4.3 Medium2023-11-09
CVE-2023-32579 WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control — Forget About Shortcode Buttons 5.3 Medium2023-11-09
CVE-2023-32587 WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF) — WP Reactions Lite 5.4 Medium2023-11-09
CVE-2023-32592 WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF) — Sunny Search 5.4 Medium2023-11-09
CVE-2023-32594 WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF) — Hyphenator 4.3 Medium2023-11-09
CVE-2023-32602 WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF) — CALL ME NOW 4.3 Medium2023-11-09
CVE-2023-32739 WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF) — WP Custom Cursors | WordPress Cursor Plugin 4.3 Medium2023-11-09
CVE-2023-32744 WordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) — Product Recommendations 5.4 Medium2023-11-09
CVE-2023-32745 WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF) — AutomateWoo 5.4 Medium2023-11-09
CVE-2023-32794 WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF) — Product Add-Ons 5.4 Medium2023-11-09
CVE-2023-34024 WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF) — WP Full Auto Tags Manager 4.3 Medium2023-11-09
CVE-2023-34025 WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF) — LWS Hide Login 5.4 Medium2023-11-09
CVE-2023-34031 WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF) — bbPress Toolkit 4.3 Medium2023-11-09
CVE-2023-34033 WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF) — Ajax Pagination and Infinite Scroll 4.3 Medium2023-11-09
CVE-2023-34169 WordPress TS Webfonts for さくらのレンタルサーバ Plugin <= 3.1.2 is vulnerable to Broken Access Control — TS Webfonts for さくらのレンタルサーバ 6.5 Medium2023-11-09
CVE-2023-34171 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF) — WP Report Post 5.4 Medium2023-11-09
CVE-2023-34177 WordPress WP-Cache.com Plugin <= 1.1.1 is vulnerable to Cross Site Request Forgery (CSRF) — WP-Cache.com 5.4 Medium2023-11-09
CVE-2023-34178 WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF) — Groundhogg 5.4 Medium2023-11-09
CVE-2023-34181 WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Request Forgery (CSRF) — WP-Cirrus 4.3 Medium2023-11-09
CVE-2023-34182 WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF) — LH Password Changer 5.4 Medium2023-11-09
CVE-2023-34371 WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Request Forgery (CSRF) — SpamReferrerBlock 4.3 Medium2023-11-09
CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF) — Top 10 – WordPress Popular posts by WebberZone 4.3 Medium2023-11-09
CVE-2023-47237 WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF) — Auto Publish for Google My Business 5.4 Medium2023-11-09
CVE-2023-46614 WordPress WP Helper Premium Plugin <= 4.5.1 is vulnerable to Cross Site Request Forgery (CSRF) — WP Helper Premium 5.4 Medium2023-11-09

Vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)) represent 4754 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.