Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-352 Clear
ID Title
CVE-2026-30807 Cross-Site Request Forgery (CSRF) in artica (CVE-2026-30807)
vulnerability in artica (CVE-2026-30807). Successful exploitation can lead to full system takeover.
CVE-2026-42073 Cross-Site Request Forgery (CSRF) in @gitlawb/openclaude (CVE-2026-42073)
vulnerability in @gitlawb/openclaude (CVE-2026-42073). Risk of unauthorized operations or information disclosure. Exploitable via ``error``. Mitigation: upgrade to `0.5.1` or later.
CVE-2026-6932 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6932)
vulnerability in wordpress (CVE-2026-6932). Risk of unauthorized operations or information disclosure.
CVE-2026-6710 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6710)
vulnerability in wordpress (CVE-2026-6710). Risk of unauthorized operations or information disclosure.
CVE-2026-7562 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7562)
vulnerability in wordpress (CVE-2026-7562). Risk of unauthorized operations or information disclosure.
CVE-2026-7616 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7616)
vulnerability in wordpress (CVE-2026-7616). Risk of unauthorized operations or information disclosure.
CVE-2026-7561 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7561)
vulnerability in wordpress (CVE-2026-7561). Risk of unauthorized operations or information disclosure.
CVE-2026-20704 Cross-Site Request Forgery (CSRF) in jvn (CVE-2026-20704)
vulnerability in jvn (CVE-2026-20704). Risk of unauthorized operations or information disclosure.
CVE-2026-45430 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-45430)
vulnerability in csrf (CVE-2026-45430). Confidential information can be exposed externally.
CVE-2026-0502 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-0502)
vulnerability in csrf (CVE-2026-0502). Risk of unauthorized operations or information disclosure.
CVE-2026-44695 Cross-Site Request Forgery (CSRF) in getoutline (CVE-2026-44695)
vulnerability in getoutline (CVE-2026-44695). Confidential information can be exposed externally. Exploitable via `GET /auth/slack.post`. Mitigation: upgrade to `1.7.1` or later.
CVE-2026-43877 Cross-Site Request Forgery (CSRF) in wwbn/avideo (CVE-2026-43877)
vulnerability in wwbn/avideo (CVE-2026-43877). Risk of unauthorized operations or information disclosure. Exploitable via ``autoCSRFGuard``.
CVE-2026-38566 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-38566)
vulnerability in csrf (CVE-2026-38566). Confidential information can be exposed externally.
CVE-2022-50955 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2022-50955)
vulnerability in wordpress (CVE-2022-50955). Risk of unauthorized operations or information disclosure.
CVE-2021-47946 Cross-Site Request Forgery (CSRF) in csrf (CVE-2021-47946)
vulnerability in csrf (CVE-2021-47946). Risk of unauthorized operations or information disclosure.
CVE-2021-47953 Cross-Site Request Forgery (CSRF) in CVE-2021-47953 (CVE-2021-47953)
vulnerability in CVE-2021-47953 (CVE-2021-47953). Risk of unauthorized operations or information disclosure.
CVE-2026-8194 Cross-Site Request Forgery (CSRF) in CVE-2026-8194 (CVE-2026-8194)
vulnerability in CVE-2026-8194 (CVE-2026-8194). Risk of unauthorized operations or information disclosure.
CVE-2026-42286 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-42286)
vulnerability in csrf (CVE-2026-42286). Risk of unauthorized operations or information disclosure.
CVE-2026-42190 Cross-Site Request Forgery (CSRF) in rwsdk (CVE-2026-42190)
vulnerability in rwsdk (CVE-2026-42190). Data can be tampered with by attackers. Exploitable via ``rwsdk``. Mitigation: upgrade to `1.2.3` or later.
CVE-2026-5791 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-5791)
vulnerability in csrf (CVE-2026-5791). Data can be tampered with by attackers.
CVE-2026-42091 Cross-Site Request Forgery (CSRF) in github.com/patrickhener/goshs (CVE-2026-42091)
vulnerability in github.com/patrickhener/goshs (CVE-2026-42091). Data can be tampered with by attackers. Exploitable via ``e3c3d37``. Mitigation: upgrade to `2.0.2` or later.
CVE-2026-36960 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-36960)
vulnerability in csrf (CVE-2026-36960). Successful exploitation can lead to full system takeover.
CVE-2026-36956 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-36956)
vulnerability in csrf (CVE-2026-36956). Successful exploitation can lead to full system takeover.
CVE-2026-38934 Cross-Site Request Forgery (CSRF) in CVE-2026-38934 (CVE-2026-38934)
vulnerability in CVE-2026-38934 (CVE-2026-38934). Successful exploitation can lead to full system takeover.
CVE-2026-40948 Cross-Site Request Forgery (CSRF) in apache (CVE-2026-40948)
vulnerability in apache (CVE-2026-40948). Risk of unauthorized operations or information disclosure. Exploitable via ``state``.
CVE-2026-39848 Vulnerability in csrf (CVE-2026-39848)
vulnerability in csrf (CVE-2026-39848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-5918 Vulnerability in google (CVE-2026-5918)
vulnerability in google (CVE-2026-5918). Risk of unauthorized operations or information disclosure.
CVE-2026-34721 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34721)
vulnerability in csrf (CVE-2026-34721). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
CVE-2026-0811 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-0811)
vulnerability in wordpress (CVE-2026-0811). Risk of unauthorized operations or information disclosure.
CVE-2026-1673 Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1673)
vulnerability in csharp (CVE-2026-1673). Risk of unauthorized operations or information disclosure.
CVE-2026-1672 Cross-Site Request Forgery (CSRF) in csharp (CVE-2026-1672)
vulnerability in csharp (CVE-2026-1672). Data can be tampered with by attackers.
CVE-2026-39710 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39710)
vulnerability in csrf (CVE-2026-39710). Risk of unauthorized operations or information disclosure.
CVE-2026-39671 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39671)
vulnerability in csrf (CVE-2026-39671). Risk of unauthorized operations or information disclosure.
CVE-2026-39635 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39635)
vulnerability in csrf (CVE-2026-39635). Risk of unauthorized operations or information disclosure.
CVE-2026-39634 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39634)
vulnerability in csrf (CVE-2026-39634). Risk of unauthorized operations or information disclosure.
CVE-2026-39640 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39640)
vulnerability in csrf (CVE-2026-39640). Successful exploitation can lead to full system takeover.
CVE-2026-39641 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39641)
vulnerability in csrf (CVE-2026-39641). Risk of unauthorized operations or information disclosure.
CVE-2026-39632 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39632)
vulnerability in csrf (CVE-2026-39632). Data can be tampered with by attackers.
CVE-2026-39633 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39633)
vulnerability in csrf (CVE-2026-39633). Data can be tampered with by attackers.
CVE-2026-39620 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39620)
vulnerability in csrf (CVE-2026-39620). Successful exploitation can lead to full system takeover.
CVE-2026-39621 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39621)
vulnerability in csrf (CVE-2026-39621). Successful exploitation can lead to full system takeover.
CVE-2026-39617 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39617)
vulnerability in csrf (CVE-2026-39617). Successful exploitation can lead to full system takeover.
CVE-2026-39618 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39618)
vulnerability in csrf (CVE-2026-39618). Risk of unauthorized operations or information disclosure.
CVE-2026-39619 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39619)
vulnerability in csrf (CVE-2026-39619). Successful exploitation can lead to full system takeover.
CVE-2026-39603 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-39603)
vulnerability in csrf (CVE-2026-39603). Risk of unauthorized operations or information disclosure.
CVE-2026-4141 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4141)
vulnerability in wordpress (CVE-2026-4141). Risk of unauthorized operations or information disclosure.
CVE-2026-3499 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-3499)
vulnerability in wordpress (CVE-2026-3499). Successful exploitation can lead to full system takeover.
CVE-2026-39371 Cross-Site Request Forgery (CSRF) in react (CVE-2026-39371)
vulnerability in react (CVE-2026-39371). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.6` or later.
CVE-2026-35180 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
CVE-2026-35181 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →