Search Vulnerabilities

React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass

Apache APISIX: cas-auth login CSRF / session injection issue

User Admin Simplifier <= 3.0.0 - Cross-Site Request Forgery

WordPress WP EasyPay plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery in UBB.threads

Cotonti CSRF in PFS folder edit allows unauthorized folder modification

Cotonti CSRF in PFS allows forced arbitrary file upload

Cotonti CSRF in admin.rights.php allows privilege escalation

Cotonti CSRF in admin.config.php allows unauthorized configuration changes

Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_fi...

Cross-Site Request Forgery (CSRF) in SimplCommerce News Module

WordPress Emergency Password Reset plugin <= 8.0 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Skyline WP theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WordPress Dating Theme theme <= 11.2.0 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

MultiJuicer: Login CSRF allows attacker to force victims into their team

WordPress More Fields Plugin 2.1 Cross-Site Request Forgery

WordPress Lazy Content Slider Plugin 3.4 CSRF

WordPress CP Polls 1.0.8 Cross-Site Request Forgery

Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents