Cross-Site Request Forgery

⚔️ Attack Types Related 1,068

slug: csrf

No explanation yet for this tag.

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Remote Code Execution2906 Path Traversal2053 Privilege Escalation1503 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 1,075

ID	Title	Severity	Detected
CVE-2026-57784	Cross-Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension (CVE-2026-57784)	Critical	2 months ago
CVE-2026-57626	Cross-Site Request Forgery (CSRF) in MailPoet (CVE-2026-57626)	High	2 months ago
CVE-2026-65757	The editor popup could expose restricted module data to authenticated users without the required...	High	2 months ago
CVE-2026-24537	Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6...	Medium	2 months ago
CVE-2026-64876	Database-update requests lacked consistent token and Super User checks, this could cause...	High	2 months ago
CVE-2026-64871	Administrator URL purges did not consistently require a valid token and cache-management permission.	Medium	2 months ago
CVE-2026-63265	Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching...	High	2 months ago
CVE-2026-63685	Administrator routes and replacement requests did not consistently require Super User permission...	High	2 months ago
CVE-2026-63684	Administrator actions, editor popups and import/export requests lacked consistent token, item...	High	2 months ago
CVE-2026-64791	Administrator routes and install/update/uninstall processing did not consistently enforce...	High	2 months ago
CVE-2026-63280	Conditions administration did not consistently enforce tokens and component/mapped-item permissions.	High	2 months ago
CVE-2026-64821	Cross-Site Request Forgery (CSRF) in djangoSIGE (CVE-2026-64821)	Medium	2 months ago
CVE-2026-47688	Vulnerability in FOG (CVE-2026-47688)	High	2 months ago
CVE-2026-50743	Cross-Site Request Forgery (CSRF) in Revive Adserver (CVE-2026-50743)	Medium	2 months ago
CVE-2026-32825	Vulnerability in Ruby on Rails (CVE-2026-32825)	High	2 months ago
CVE-2026-32823	Cross-Site Request Forgery (CSRF) in Ruby on Rails (CVE-2026-32823)	Medium	2 months ago
CVE-2026-60025	Cross-Site Request Forgery (CSRF) in Joomla extension Events Booking prior (CVE-2026-60025)	High	3 months ago
CVE-2026-62236	Cross-Site Request Forgery (CSRF) in grav-plugin-login (CVE-2026-62236)	Medium	3 months ago
CVE-2026-62232	Vulnerability in Grav (CVE-2026-62232)	High	3 months ago
CVE-2026-35143	Information Disclosure in HCL DFXAnalytics (CVE-2026-35143)	Low	3 months ago
CVE-2026-15407	Vulnerability in Themify Builder (WordPress plugin) (CVE-2026-15407)	Medium	3 months ago
CVE-2026-11866	Cross-Site Request Forgery (CSRF) in Appointment Booking Plugin (WordPress plugin) (CVE-2026-11866)	Medium	3 months ago
CVE-2026-26718	A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3...	Critical	3 months ago
CVE-2026-20296	Cross-Site Request Forgery (CSRF) in Splunk Enterprise (CVE-2026-20296)	High	3 months ago
CVE-2026-54087	Unrestricted File Upload in easycorp/easyadmin-bundle (CVE-2026-54087)	High	3 months ago
CVE-2026-15747	Vulnerability in Mojolicious (CVE-2026-15747)	Critical	3 months ago
CVE-2026-58476	Cross-Site Request Forgery (CSRF) in Dan In Ca (CVE-2026-58476)	High	3 months ago
CVE-2026-11563	Vulnerability in Word Count and Social Shares (WordPress plugin) (CVE-2026-11563)	Critical	3 months ago
CVE-2026-49971	Cross-Site Scripting (XSS) in Laravel-Mediable (CVE-2026-49971)	Medium	3 months ago
CVE-2026-61502	Cross-Site Request Forgery (CSRF) in Rejetto HFS (CVE-2026-61502)	Medium	3 months ago