Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-352 (跨站请求伪造(CSRF)) — Vulnerability Class 4754

4754 vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-4424 Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass — Slider Hero with Video Background, Animation 4.3 Medium2023-07-12
CVE-2021-4423 RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass — RAYS Grid 4.3 Medium2023-07-12
CVE-2021-4422 POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass — Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 4.3 Medium2023-07-12
CVE-2021-4421 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass — Advanced Popups 4.3 Medium2023-07-12
CVE-2020-36757 WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass — WP Hotel Booking 4.3 Medium2023-07-12
CVE-2021-4420 Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass — Sell Media 4.3 Medium2023-07-12
CVE-2020-36756 10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass — 10WebAnalytics 4.3 Medium2023-07-12
CVE-2021-4419 WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypass — WP-Backgrounds Lite 4.3 Medium2023-07-12
CVE-2023-3202 MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update — MStore API – Create Native Android & iOS Apps On The Cloud 4.3 Medium2023-07-12
CVE-2023-2517 Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor 5.4 Medium2023-07-12
CVE-2020-36752 Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass — Coming Soon & Maintenance Mode Page & Under Construction 4.3 Medium2023-07-12
CVE-2023-3199 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update — MStore API – Create Native Android & iOS Apps On The Cloud 4.3 Medium2023-07-12
CVE-2023-3011 ARMember <= 4.0.5 - Cross-Site Request Forgery — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup 6.5 Medium2023-07-12
CVE-2021-4417 Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass — Forminator Forms – Contact Form, Payment Form & Custom Form Builder 5.4 Medium2023-07-12
CVE-2021-4416 wp-mpdf <= 3.5.1 - Cross-Site Request Forgery Bypass — wp-mpdf 4.3 Medium2023-07-12
CVE-2021-4415 Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass — Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers 4.3 Medium2023-07-12
CVE-2021-4414 Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass — Abandoned Cart Lite for WooCommerce 4.3 Medium2023-07-12
CVE-2021-4413 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass — Process Steps Template Designer 4.3 Medium2023-07-12
CVE-2021-4412 WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass — WP Prayer 4.3 Medium2023-07-12
CVE-2021-4411 WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass — WP Easy Pay – Payment and Donation form Builder for Square 4.3 Medium2023-07-12
CVE-2021-4410 Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass — Qtranslate Slug 4.3 Medium2023-07-12
CVE-2021-4409 WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass — Etsy Integration For WooCommerce 4.3 Medium2023-07-12
CVE-2021-4408 DW Question & Answer <= 1.5.8 - Cross-Site Request Forgery Bypass — DW Question & Answer 4.3 Medium2023-07-12
CVE-2021-4407 Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass — Custom Banners 4.3 Medium2023-07-12
CVE-2020-36750 EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass — EWWW Image Optimizer 4.3 Medium2023-07-12
CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core — salesagility/suitecrm-core 6.5 -2023-07-11
CVE-2023-2746 Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack — Enhanced HIM 9.6 Critical2023-07-11
CVE-2023-32104 WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF) — MyCurator Content Curation 4.3 Medium2023-07-11
CVE-2023-35091 WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF) — Stock Manager for WooCommerce 4.3 Medium2023-07-11
CVE-2023-35773 WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) — Template Debugger 4.3 Medium2023-07-11

Vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)) represent 4754 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.