CSRF

2116 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-38754 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Taggbox allows Cross Site Request Forgery.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-38753 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Animated Rotating Words allows Cross Site Request Forgery.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-38751 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Google Adsense & Banner Ads by AdsforWP allows Cross Site Request Forgery.9.28. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Google CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-38729 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in MBE Worldwide S.p.A. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2024-38691 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Metorik Metorik - Reports & Email Automation for WooCommerce allows Cross Site Request Forgery.7.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF WordPress

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37937 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Rara Business allows Cross Site Request Forgery.2.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37543 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Nitesh Singh Ultimate Auction allows Cross Site Request Forgery.2.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37540 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Leaky Paywall Leaky Paywall allows Cross Site Request Forgery.21.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37518 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in The Events Calendar The Events Calendar allows Cross Site Request Forgery.5.1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37511 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in SWTE Swift Performance Lite allows Cross Site Request Forgery.3.6.20. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37508 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Construction Landing Page allows Cross Site Request Forgery.3.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37503 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Lawyer Landing Page allows Cross Site Request Forgery.2.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37493 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in SKT Themes Posterity allows Cross Site Request Forgery.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37491 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Apollo13Themes Rife Free allows Cross Site Request Forgery.4.18. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37490 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in WP Royal Bard allows Cross Site Request Forgery.210. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37478 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in WP Royal Ashe allows Cross Site Request Forgery.233. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-37473 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in BlazeThemes Trendy News allows Cross Site Request Forgery.0.15. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37469 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy allows Cross Site Request Forgery.0.22. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2024-37467 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in ThemeIsle Hestia allows Cross Site Request Forgery.1.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-37458 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in ExtendThemes Highlight allows Cross Site Request Forgery.0.29. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37451 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Travel Agency allows Cross Site Request Forgery.4.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37450 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Benevolent allows Cross Site Request Forgery.3.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37448 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in FameThemes OnePress allows Cross Site Request Forgery.3.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37441 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in DesertThemes NewsMash allows Cross Site Request Forgery.0.34. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37435 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Perfect Portfolio allows Cross Site Request Forgery.2.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37431 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Horea Radu Mesmerize allows Cross Site Request Forgery.6.120. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37426 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Elegant Pink allows Cross Site Request Forgery.3.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Elegant Pink

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37421 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme JobScout allows Cross Site Request Forgery.1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jobscout

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37417 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Coachify Coachify allows Cross Site Request Forgery.0.7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-37413 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Preschool and Kindergarten allows Cross Site Request Forgery.2.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Preschool And Kindergarten

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37412 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Blossom Shop allows Cross Site Request Forgery.1.7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37274 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Freshlight Lab WP Mobile Menu allows Cross Site Request Forgery.8.4.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37272 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in WP Travel Engine Travel Monster allows Cross Site Request Forgery.1.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37243 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Vandana Lite allows Cross Site Request Forgery.1.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Vandana

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37242 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters allows Cross Site Request Forgery.13.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37240 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage allows Cross Site Request Forgery.3.51. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37238 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Greg Winiarski WPAdverts - Classifieds Plugin allows Cross Site Request Forgery.1.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-37236 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Tim Whitlock Loco Translate allows Cross Site Request Forgery.6.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37235 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Groundhogg Inc. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37104 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Chic Lite allows Cross Site Request Forgery.1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Chic

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37103 MEDIUM Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Education Zone allows Cross Site Request Forgery.3.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Education Zone

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2024-37102 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Vilva allows Cross Site Request Forgery.2.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-37093 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes MasterStudy LMS allows Cross Site Request Forgery.2.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-5455 MEDIUM This Month

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.

CSRF Enterprise Linux For Power Little Endian Eus Enterprise Linux For Power Big Endian Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Enterprise Linux For Arm 64 Eus +17

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2023-36517 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CSRF Wp Abstracts

NVD VulDB

CVSS 3.1

4.3

EPSS

0.1%

CVE-2023-2307 npm MEDIUM POC PATCH This Month

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

CSRF Qwik

NVD GitHub VulDB

CVSS 3.1

4.7

EPSS

0.1%

CVE-2024-38754

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-38753

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-38751

EPSS 0% CVSS 4.3

MEDIUM Monitor

Google CSRF

NVD

CVE-2024-38729

EPSS 0% CVSS 5.4

MEDIUM This Month

CSRF

NVD

CVE-2024-38691

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF WordPress

NVD

CVE-2024-37937

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37543

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37540

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37518

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37511

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37508

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37503

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37493

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37491

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37490

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37478

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37473

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37469

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37467

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37458

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37451

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37450

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37448

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37441

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37435

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37431

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37426

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Elegant Pink

NVD

CVE-2024-37421

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Jobscout

NVD

CVE-2024-37417

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37413

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Preschool And Kindergarten

NVD

CVE-2024-37412

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37274

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37272

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37243

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Vandana

NVD

CVE-2024-37242

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37240

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37238

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37236

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF

NVD

CVE-2024-37235

EPSS 0% CVSS 4.3

MEDIUM This Month

CSRF

NVD

CVE-2024-37104

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Chic

NVD

CVE-2024-37103

EPSS 0% CVSS 4.3

MEDIUM Monitor

CSRF Education Zone

NVD

CVE-2024-37102

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2024-37093

EPSS 0% CVSS 8.8

HIGH This Week

CSRF

NVD

CVE-2023-5455

EPSS 0% CVSS 6.5

MEDIUM This Month

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.

CSRF Enterprise Linux For Power Little Endian Eus Enterprise Linux For Power Big Endian +19

NVD

CVE-2023-36517

EPSS 0% CVSS 4.3

MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CSRF Wp Abstracts

NVD VulDB

CVE-2023-2307 npm

EPSS 0% CVSS 4.7

MEDIUM POC PATCH This Month

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

CSRF Qwik

NVD GitHub VulDB

Prev Page 24 of 24