Vulnerabilities > Cross-Site Request Forgery (CSRF)
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-11 | CVE-2019-14998 | Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira Server The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance. | 4.3 |
| 2019-09-10 | CVE-2017-18607 | Cross-Site Request Forgery (CSRF) vulnerability in Theme-Fusion Avada The avada theme before 5.1.5 for WordPress has CSRF. | 6.8 |
| 2019-09-09 | CVE-2019-10253 | Cross-Site Request Forgery (CSRF) vulnerability in Teammatesolutions Teammate+ 21.0.0.0 A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files). | 4.3 |
| 2019-09-08 | CVE-2019-16099 | Cross-Site Request Forgery (CSRF) vulnerability in Silver-Peak Unity Edgeconnect Sd-Wan Firmware 8.1.4.965644 Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file. | 6.8 |
| 2019-09-06 | CVE-2019-15128 | Cross-Site Request Forgery (CSRF) vulnerability in If.Svnadmin Project If.Svnadmin 1.6.0/1.6.1/1.6.2 iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user. | 4.3 |
| 2019-09-06 | CVE-2019-16059 | Cross-Site Request Forgery (CSRF) vulnerability in Sapplica Sentrifugo 3.2 Sentrifugo 3.2 lacks CSRF protection. | 6.8 |
| 2019-09-03 | CVE-2019-15868 | Cross-Site Request Forgery (CSRF) vulnerability in Wpaffiliatemanager Affiliates Manager The affiliates-manager plugin before 2.6.6 for WordPress has CSRF. | 6.8 |
| 2019-09-03 | CVE-2019-15865 | Cross-Site Request Forgery (CSRF) vulnerability in Holest Breadcrumbs BY Menu The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF. | 6.8 |
| 2019-08-30 | CVE-2019-15841 | Cross-Site Request Forgery (CSRF) vulnerability in Facebook FOR Woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility. | 6.8 |
| 2019-08-30 | CVE-2019-15840 | Cross-Site Request Forgery (CSRF) vulnerability in Facebook for Woocommerce 1.9.11/1.9.12/1.9.13 The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. | 6.8 |