Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-14216 Cross-Site Request Forgery (CSRF) vulnerability in WP SVG Icons Project WP SVG Icons
An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress.
6.8
2019-08-14 CVE-2019-10199 Cross-Site Request Forgery (CSRF) vulnerability in Redhat Keycloak
It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests.
network
redhat CWE-352
6.8
2019-08-14 CVE-2018-20968 Cross-Site Request Forgery (CSRF) vulnerability in Smackcoders Ultimate Exporter
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
6.8
2019-08-14 CVE-2018-20967 Cross-Site Request Forgery (CSRF) vulnerability in Smackcoders Import ALL Pages, Post Types, Products, Orders, and Users AS XML & CSV
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
network
low complexity
smackcoders CWE-352
8.8
2019-08-14 CVE-2017-18513 Cross-Site Request Forgery (CSRF) vulnerability in Expresstech Responsive Menu
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
6.8
2019-08-14 CVE-2017-18512 Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Newsletter BY Supsystic
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
network
supsystic CWE-352
6.8
2019-08-14 CVE-2017-18511 Cross-Site Request Forgery (CSRF) vulnerability in Wpmudev Custom Sidebars
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
network
wpmudev CWE-352
6.8
2019-08-14 CVE-2017-18510 Cross-Site Request Forgery (CSRF) vulnerability in Wpmudev Custom Sidebars 3.0.8.1
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
network
wpmudev CWE-352
6.8
2019-08-14 CVE-2016-10885 Cross-Site Request Forgery (CSRF) vulnerability in Benjaminrojas WP Editor
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
network
low complexity
benjaminrojas CWE-352
8.8
2019-08-14 CVE-2016-10884 Cross-Site Request Forgery (CSRF) vulnerability in Simple-Membership-Plugin Simple Membership
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
network
low complexity
simple-membership-plugin CWE-352
8.8