Weaknesses of type CWE-352

5,735 results
CVE-2024-35207HIGHA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interface of the affected EPSS 0.2%CVE-2025-4198MEDIUMAlink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-4971MEDIUMSourceCodester Note Taking App cross-site request forgeryEPSS 0.2%CVE-2025-47661MEDIUMWordPress 워드프레스 결제 심플페이 plugin <= 5.2.11 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2021-47800MEDIUMb2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-4199MEDIUMAbundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-48037MEDIUMWordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerabilityEPSS 0.2%CVE-2026-11981MEDIUMGiveWP <= 4.15.3 - Cross-Site Request ForgeryEPSS 0.2%CVE-2024-13494MEDIUMWordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_detailsEPSS 0.2%CVE-2024-13336MEDIUMDisable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update DisableEPSS 0.2%CVE-2025-30603HIGHWordPress CopyLink plugin <= 1.1 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2025-30621HIGHWordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2025-59110MEDIUMCross-Site Request Forgery in Windu CMSEPSS 0.2%CVE-2026-3191MEDIUMMinify HTML <= 2.1.12 - Cross-Site Request Forgery to Plugin Settings UpdateEPSS 0.2%CVE-2025-30620HIGHWordPress WP Odoo Form Integrator plugin <=1.1.0 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2025-32261MEDIUMWordPress Advanced All in One Admin Search by WP Spotlight plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-32263MEDIUMWordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-10581MEDIUMDirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status UpdateEPSS 0.2%CVE-2025-58997CRITICALWordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-30608HIGHWordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%