Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CVEs (9,658)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-10945 1Pagelines 1Pagelines Nov 21, 2024 Sep 13, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF.
CVE-2016-10944 1Wpmaz 1Multisite Post Duplicator Nov 21, 2024 Sep 13, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.
CVE-2016-10938 1Copy Me Project 1Copy Me Nov 21, 2024 Sep 13, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.
CVE-2019-5993 1Tipsandtricks Hq 1Category Specific Rss Feed Subscription Jun 17, 2026 Sep 12, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVE-2019-5992 1Ultra Prod 1Wordpress Ultra Simple Paypal Shopping Cart Jun 17, 2026 Sep 12, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVE-2019-5986 2Ntt East Ntt West 46Pr 400ki Firmware Pr 400ki FirmwarePr 400mi Firmware+43 more Jun 17, 2026 Sep 12, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware ver...Show more Cross-site request forgery (CSRF) vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to hijack the authentication of administrators via unspecified vectors.Show less
CVE-2019-1261 1Microsoft 3Sharepoint Enterprise Server Sharepoint FoundationSharepoint Server Jun 17, 2026 Sep 11, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need...Show more A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259.Show less
CVE-2019-1259 1Microsoft 1Sharepoint Foundation Jun 17, 2026 Sep 11, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need...Show more A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1261.Show less
CVE-2019-14998 1Atlassian 1Jira Server Jun 17, 2026 Sep 11, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira i...Show more The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.Show less
CVE-2017-18607 1Theme Fusion 1Avada Nov 21, 2024 Sep 10, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The avada theme before 5.1.5 for WordPress has CSRF.
CVE-2019-10253 1Teammatesolutions 1Teammate+ Jun 17, 2026 Sep 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded fi...Show more A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files). The specific flaw exists within the handling of Upload/DomainObjectDocumentUpload.ashx requests because of failure to validate a CSRF token before handling a POST request.Show less
CVE-2019-16099 1Silver Peak 1Unity Edgeconnect Sd Wan Firmware Jun 17, 2026 Sep 8, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
CVE-2019-15128 1If.svnadmin Project 1If.svnadmin Jun 17, 2026 Sep 6, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
CVE-2019-16059 1Sapplica 1Sentrifugo Jun 17, 2026 Sep 6, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.
CVE-2019-15868 1Wpaffiliatemanager 1Affiliates Manager Jun 17, 2026 Sep 3, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
CVE-2019-15865 1Holest 1Breadcrumbs By Menu Jun 17, 2026 Sep 3, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
CVE-2019-15841 1Facebook 1Facebook For Woocommerce Jun 17, 2026 Aug 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility.
CVE-2019-15840 1Facebook 1Facebook For Woocommerce Jun 17, 2026 Aug 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
CVE-2019-15835 1Wp Better Permalinks Project 1Wp Better Permalinks Jun 17, 2026 Aug 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
CVE-2019-15834 1Webp Converter For Media Project 1Webp Converter For Media Jun 17, 2026 Aug 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.

Previous 1...365366367...483 Next