Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-352 (跨站请求伪造(CSRF)) — Vulnerability Class 4751

4751 vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-58259 WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability — Nokri 7.1 High2025-09-22
CVE-2025-58262 WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability — Sweet Energy Efficiency 7.1 High2025-09-22
CVE-2025-58261 WordPress Mavis HTTPS to HTTP Redirection Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability — Mavis HTTPS to HTTP Redirection 7.1 High2025-09-22
CVE-2025-58267 WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability — Stock Message 7.1 High2025-09-22
CVE-2025-58268 WordPress WPMK PDF Generator Plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability — WPMK PDF Generator 7.1 High2025-09-22
CVE-2025-58270 WordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability — NIX Anti-Spam Light 7.1 High2025-09-22
CVE-2025-58657 WordPress Grid plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability — Grid 7.1 High2025-09-22
CVE-2025-58670 WordPress WP Content Protection Plugin <= 1.3 - Cross Site Request Forgery (CSRF) Vulnerability — WP Content Protection 7.1 High2025-09-22
CVE-2025-58675 WordPress Interact: Embed A Quiz On Your Site Plugin <= 3.1 - Cross Site Request Forgery (CSRF) Vulnerability — Interact: Embed A Quiz On Your Site 4.3 Medium2025-09-22
CVE-2025-58677 WordPress ShrinkTheWeb (STW) Website Previews Plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) Vulnerability — ShrinkTheWeb (STW) Website Previews 7.1 High2025-09-22
CVE-2025-58676 WordPress HORIZONTAL SLIDER Plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability — HORIZONTAL SLIDER 7.1 High2025-09-22
CVE-2025-58687 WordPress Current Age Plugin Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability — Current Age Plugin 7.1 High2025-09-22
CVE-2025-58688 WordPress Casengo Live Chat Support Plugin <= 2.1.4 - Cross Site Request Forgery (CSRF) Vulnerability — Casengo Live Chat Support 7.1 High2025-09-22
CVE-2025-58690 WordPress Doliconnect Plugin <= 9.5.7 - Cross Site Request Forgery (CSRF) Vulnerability — Doliconnect 7.1 High2025-09-22
CVE-2025-9887 Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery — Custom Login And Signup Widget 4.3 Medium2025-09-20
CVE-2025-9883 Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting — Browser Sniff 6.1 Medium2025-09-20
CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting — osTicket WP Bridge 6.1 Medium2025-09-20
CVE-2025-9949 Internal Links Manager <= 3.0.1 - Cross-Site Request Forgery — Internal Links Manager 4.3 Medium2025-09-20
CVE-2025-43809 Liferay Portal和Liferay DXP 安全漏洞 — Portal 6.5 -2025-09-19
CVE-2025-10188 The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Cross-Site Request Forgery to Arbitrary Directory Deletion in /wp-content — The Hack Repair Guy's Plugin Archiver 5.4 Medium2025-09-17
CVE-2025-9891 User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation — User Sync 4.3 Medium2025-09-17
CVE-2025-9629 USS Upyun <= 1.5.0 - Cross-Site Request Forgery — USS Upyun 4.3 Medium2025-09-17
CVE-2025-9881 Ultimate Blogroll <= 2.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting — Ultimate Blogroll 6.1 Medium2025-09-12
CVE-2025-9880 Side Slide Responsive Menu <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting — Side Slide Responsive Menu 6.1 Medium2025-09-12
CVE-2025-9633 LH Signing <= 2.83 - Cross-Site Request Forgery — LH Signing 4.3 Medium2025-09-11
CVE-2025-9632 PhpList Subber <= 1.1 - Cross-Site Request Forgery — PhpList Subber 4.3 Medium2025-09-11
CVE-2025-9617 Publish approval <= 1.1 - Cross-Site Request Forgery — Publish approval 5.3 Medium2025-09-11
CVE-2025-9620 Seo Monster <= 3.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting — Seo Monster 6.1 Medium2025-09-11
CVE-2025-9623 Admin in English with Switch <= 1.1 - Cross-Site Request Forgery — Admin in English with Switch 4.3 Medium2025-09-11
CVE-2025-8481 Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery — Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid 4.3 Medium2025-09-11

Vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)) represent 4751 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.