Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-352 (跨站请求伪造(CSRF)) — Vulnerability Class 4753

4753 vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-47142 WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF) — Mediamatic – Media Library Folders 4.3 Medium2023-05-22
CVE-2023-22714 WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF) — Coming Soon by Supsystic 4.3 Medium2023-05-22
CVE-2023-22709 WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF) — SRS Simple Hits Counter 4.3 Medium2023-05-22
CVE-2023-22692 WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF) — Name Directory 4.3 Medium2023-05-22
CVE-2023-22688 WordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) — WP Tabs Slides 4.3 Medium2023-05-22
CVE-2023-23680 WordPress WP TopBar Plugin <= 5.36 is vulnerable to Cross Site Request Forgery (CSRF) — WP-TopBar 5.4 Medium2023-05-22
CVE-2023-23712 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF) — User Meta Manager 5.4 Medium2023-05-22
CVE-2023-23813 WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF) — My Calendar 5.4 Medium2023-05-22
CVE-2022-47134 WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) — Gallery Metabox 4.3 Medium2023-05-20
CVE-2023-32589 WordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) — Dyslexiefont Free 4.3 Medium2023-05-20
CVE-2023-22689 WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control — Auto Affiliate Links 5.4 Medium2023-05-20
CVE-2023-23890 WordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF) — WP Airbnb Review Slider 7.1 High2023-05-20
CVE-2023-24414 WordPress Robo Gallery Plugin <= 3.2.11 is vulnerable to Cross Site Request Forgery (CSRF) — Photo Gallery, Images, Slider in Rbs Image Gallery 4.3 Medium2023-05-20
CVE-2023-2717 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins — Groundhogg — CRM, Newsletters, and Marketing Automation 5.4 Medium2023-05-20
CVE-2023-2736 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation — Groundhogg — CRM, Newsletters, and Marketing Automation 7.5 High2023-05-20
CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF) — Shoppable Images 5.4 Medium2023-05-18
CVE-2023-27430 WordPress Mass Delete Unused Tags Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF) — Mass Delete Unused Tags 5.4 Medium2023-05-18
CVE-2023-27423 WordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF) — Auto Prune Posts 5.4 Medium2023-05-18
CVE-2023-2608 Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection — Multiple Page Generator Plugin – MPG 3.1 Low2023-05-17
CVE-2023-2528 Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action — Contact Form by Supsystic 5.4 Medium2023-05-16
CVE-2023-2631 CSRF vulnerability and missing permission checks in Code Dx Plugin — Jenkins Code Dx Plugin 4.3 Medium2023-05-16
CVE-2023-2195 CSRF vulnerability and missing permission checks in Code Dx Plugin — Jenkins Code Dx Plugin 4.3 Medium2023-05-16
CVE-2023-28361 Ubiquiti UniFi Cloud Key 跨站请求伪造漏洞 — UniFi OS 6.5 -2023-05-11
CVE-2022-45846 WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF) — Image Map Pro for WordPress - Interactive SVG Image Map Builder 5.4 Medium2023-05-10
CVE-2023-25832 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS. — Portal for ArcGIS 8.8 High2023-05-09
CVE-2023-2552 Cross-Site Request Forgery (CSRF) in unilogies/bumsys — unilogies/bumsys 6.5 -2023-05-05
CVE-2023-25967 WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF) — Community by PeepSo 4.3 Medium2023-05-03
CVE-2023-23790 WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF) — Pods – Custom Content Types and Fields 7.1 High2023-05-03
CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF) — Category Specific RSS feed Subscription 4.3 Medium2023-05-03
CVE-2023-2474 Rebuild cross-site request forgery — Rebuild 4.3 Medium2023-05-02

Vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)) represent 4753 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.