Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE	CVE	VULNERABILITY TITLE	RISK
2025-02-21	CVE-2024-13883	The WPUpper Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.51. network low complexity CWE-352	4.3
2025-02-20	CVE-2024-49779	IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to bypass security restrictions, caused by improper validation and management of authentication cookies. network low complexity CWE-352	4.3
2025-02-20	CVE-2024-13753	The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. network low complexity CWE-352	8.1
2025-02-19	CVE-2024-13336	The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. network low complexity CWE-352	4.3
2025-02-19	CVE-2024-13339	The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.6. network low complexity CWE-352	6.1
2025-02-19	CVE-2024-13405	The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. network low complexity CWE-352	4.3
2025-02-19	CVE-2025-0865	The WP Media Category Management plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.0 to 2.3.3. network low complexity CWE-352	6.5
2025-02-19	CVE-2025-1441	The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. network low complexity CWE-352	6.1
2025-02-18	CVE-2024-13718	Cross-Site Request Forgery (CSRF) vulnerability in Wpdesk Flexible Wishlist for Woocommerce The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.26. network low complexity wpdesk CWE-352	4.3
2025-02-18	CVE-2024-13795	Cross-Site Request Forgery (CSRF) vulnerability in Lightspeedhq Ecwid Ecommerce Shopping Cart The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. network low complexity lightspeedhq CWE-352	4.3