LikeBot – Decentralized like-system <= 0.85 - Admin+ Stored XSS via CSRF

LikeBot Unknown

CSRF in Akinsoft's QR Menu

QR Menü Akınsoft

Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS

Spiritual Gifts Survey (and optional S.H.A.P.E survey) Unknown

Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS

Spiritual Gifts Survey (and optional S.H.A.P.E survey) Unknown

Webkul QloApps CSRF Token authorization

QloApps Webkul

CSRF Token not Properly Implemented

BLU-IC2 Azure Access Technology

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation

BLU-IC2 Azure Access Technology

wooexim <= 5.0.0 - CSRF to Reflected XSS

WOOEXIM Unknown

easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

URL Shortener | Conversion Tracking | AB Testing | WooCommerce Unknown

Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRF

Contact Us By Lord Linus Unknown

Limit Bio <= 1.0 - Stored XSS via CSRF

Limit Bio Unknown

CSRF in mlflow/mlflow

mlflow/mlflow mlflow

Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF

Event Tickets with Ticket Scanner Unknown

Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification

Page Builder: Pagelayer – Drag and Drop website builder softaculous

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Splunk Enterprise Splunk

Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Splunk Enterprise Splunk

Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Splunk Enterprise Splunk

Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens

Mojolicious::Plugin::CSRF GRYPHON

Spring Framework STOMP CSRF Vulnerability

Spring Framework VMware

Weidmueller: Security routers IE-SR-2TX are affected by CSRF

IE-SR-2TX-WL Weidmueller

Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP

SAP NetWeaver Application Server for ABAP SAP_SE

Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)

SAP Fiori App (F4044 Manage Work Center Groups) SAP_SE

WordPress wp-cyr-cho plugin <= 0.1 - Cross Site Request Forgery (CSRF) vulnerability

wp-cyr-cho ktsvetkov

WordPress CheckBot plugin <= 1.05 - CSRF to Stored XSS vulnerability

CheckBot Ref

WordPress affiliate-toolkit <= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

affiliate-toolkit SERVIT Software Solutions

WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability

Appointment Booking Calendar codepeople

WordPress Recover abandoned cart for WooCommerce <= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Recover abandoned cart for WooCommerce sonalsinha21

WordPress CM Ad Changer <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

CM Ad Changer CreativeMindsSolutions

WordPress CM Answers <= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

CM Answers CreativeMindsSolutions

WordPress Simple calendar for Elementor <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

Simple calendar for Elementor Michael

WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerability

VikRestaurants Table Reservations and Take-Away e4jvikwp

WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Element Pack Pro BdThemes

WordPress Time Based Greeting plugin <= 2.2.2 - CSRF to Stored XSS vulnerability

Time Based Greeting Yash Binani

WordPress SCSS-Library <= 0.4.1 - Cross Site Request Forgery (CSRF) Vulnerability

SCSS-Library Sebastian Echeverry

WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability

Plugin Central Vladimir Prelovac

WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability

Loan Calculator Casey Johnson

WordPress occupancyplan plugin <= 1.0.3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

occupancyplan x000x

WordPress Google News plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

Google News Olav Kolbu

WordPress Wp Custom CMS Block plugin <= 2.1 - CSRF to Stored XSS vulnerability

Wp Custom CMS Block digontoahsan

WordPress occupancyplan plugin <= 1.0.3.0 - CSRF to SQL Injection vulnerability

occupancyplan x000x

WordPress WPVN <= 0.7.8 - Cross Site Request Forgery (CSRF) Vulnerability

WPVN Trân Minh-Quân

WordPress Print Science Designer plugin <= 1.3.155 - CSRF to Stored XSS vulnerability

Print Science Designer John Weissberg

WordPress Modern Polls plugin <= 1.0.10 - CSRF to Stored XSS vulnerability

Modern Polls felixtz

WordPress Call Now PHT Blog plugin <= 2.4.1 - CSRF to XSS vulnerability

Call Now PHT Blog Pham Thanh

WordPress Drop Caps plugin <= 2.1 - CSRF to XSS vulnerability

Drop Caps tomontoast

WordPress Navegg Analytics plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Navegg Analytics Navegg

WordPress Zalo Official Live Chat <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Zalo Official Live Chat nghialuu

WordPress PayPal Express Checkout plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

PayPal Express Checkout hccoder

WordPress LSD Custom taxonomy and category meta plugin <= 1.3.2 - CSRF to XSS vulnerability

LSD Custom taxonomy and category meta Bas Matthee

WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability

Vasaio QR Code Olar Marius