Vulnerabilities > Cross-Site Request Forgery (CSRF)
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-03-01 | CVE-2023-23973 | Cross-Site Request Forgery (CSRF) vulnerability in A3Rev Contact US Page - Contact People Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0. | 6.5 |
2023-03-01 | CVE-2023-23974 | Cross-Site Request Forgery (CSRF) vulnerability in Fullworksplugins Quick Event Manager Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update). | 5.4 |
2023-03-01 | CVE-2023-23984 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion. | 5.4 |
2023-02-28 | CVE-2023-27295 | Cross-Site Request Forgery (CSRF) vulnerability in Opencats 0.9.6 Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. | 5.4 |
2023-02-28 | CVE-2022-47179 | Cross-Site Request Forgery (CSRF) vulnerability in Ujsoftware OWM Weather Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft. | 4.3 |
2023-02-28 | CVE-2022-47612 | Cross-Site Request Forgery (CSRF) vulnerability in Xnau Participants Database Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 leads to list column update. | 4.3 |
2023-02-28 | CVE-2023-23865 | Cross-Site Request Forgery (CSRF) vulnerability in Checkoutplugins Stripe Payments for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin <= 1.4.10 leads to settings change. | 4.3 |
2023-02-28 | CVE-2023-23983 | Cross-Site Request Forgery (CSRF) vulnerability in Wpdevart Responsive Vertical Icon Menu Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to theme deletion. | 5.4 |
2023-02-28 | CVE-2022-43459 | Cross-Site Request Forgery (CSRF) vulnerability in Captainform Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 versions. | 8.8 |
2023-02-28 | CVE-2023-23992 | Cross-Site Request Forgery (CSRF) vulnerability in Automatorwp 1.7.6/2.5.0 Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete. | 4.3 |