Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CSRF

This page lists 750 vulnerabilities in this category.

High: 742 Medium: 6 Low: 2
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Maintenance Mode Cross-Site Request Forgery (1.8.7)
CVE-2013-3250
CWE-352
High
WordPress Plugin Featured Comments Cross-Site Request Forgery (1.2.4)
-
CWE-352
High
WordPress Plugin JW Player for Flash & HTML5 Video Cross-Site Request Forgery (2.1.11)
-
CWE-352
High
WordPress Plugin Login rebuilder Cross-Site Request Forgery (1.1.3)
CVE-2014-3882
CWE-352
High
WordPress Plugin Stream Video Player Cross-Site Request Forgery (1.4.0)
CVE-2013-2706
CWE-352
High
WordPress Plugin twimp-wp-twitter multi publisher Cross-Site Request Forgery (0.1)
CVE-2014-9397
CWE-352
High
WordPress Plugin Twitter Button by BestWebSoft Cross-Site Request Forgery (2.14)
-
CWE-352
High
WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Cross-Site Request Forgery Vulnerabilities (2.8)
-
CWE-352
High
WordPress Plugin WP Easy Slideshow Multiple Cross-Site Request Forgery Vulnerabilities (1.0.3)
-
CWE-352
High
WordPress Plugin WPBook Cross-Site Request Forgery (2.7)
-
CWE-352
High
WordPress Plugin WP Simple Booking Calendar Cross-Site Request Forgery (1.3)
-
CWE-352
High
WordPress Plugin WP Fastest Cache Cross-Site Request Forgery (0.8.3.4)
CVE-2015-4089
CWE-352
High
WordPress Plugin WPS Hide Login Cross-Site Request Forgery (1.0)
-
CWE-352
High
WordPress Plugin Analyticator Cross-Site Request Forgery (6.4.9.3)
CVE-2015-4697
CWE-352
High
WordPress Plugin Erident Custom Login and Dashboard Cross-Site Request Forgery (3.4.1)
-
CWE-352
High
WordPress Plugin Users to CSV Cross-Site Request Forgery (1.4.5)
-
CWE-352
High
WordPress Plugin Portfolio Cross-Site Request Forgery (1.0)
CVE-2015-6523
CWE-352
High
WordPress Plugin Contact Form Generator Multiple Cross-Site Request Forgery Vulnerabilities (2.1.86)
CVE-2015-6965
CWE-352
High
WordPress Plugin Cool Video Gallery Cross-Site Request Forgery (1.8)
-
CWE-352
High
WordPress Plugin Email Queue by BestWebSoft Cross-Site Request Forgery (1.0.0)
-
CWE-352
High
WordPress Plugin WP Database Backup Cross-Site Request Forgery (4.3.5)
-
CWE-352
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Cross-Site Request Forgery (2.7.2)
-
CWE-352
High
WordPress Plugin Wp-D3 Cross-Site Request Forgery (2.4)
-
CWE-352
High
WordPress Plugin RSVPMaker for Toastmasters Cross-Site Request Forgery (3.3.4)
-
CWE-352
High
WordPress Plugin Social Media Widget by Acurax Cross-Site Request Forgery (3.2.5)
CVE-2018-6357
CWE-352
High
WordPress Plugin copy-me Cross-Site Request Forgery (1.0.0)
-
CWE-352
High
WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7)
-
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Request Forgery (2.0.6)
CVE-2018-10233
CWE-352
High
WordPress Plugin WooCommerce Checkout For Digital Goods Cross-Site Request Forgery (2.2)
-
CWE-352
High
WordPress Plugin WP User Groups Cross-Site Request Forgery (2.0.0)
-
CWE-352
High
WordPress Plugin Add Social Share Messenger Buttons Whatsapp and Viber Cross-Site Request Forgery (1.0.8)
-
CWE-352
High
WordPress Plugin Eu Cookie Notice Cross-Site Request Forgery (1.0.6)
-
CWE-352
High
WordPress Plugin Redirection Cross-Site Request Forgery (3.6.2)
-
CWE-352
High
WordPress Plugin BuddyPress Cross-Site Request Forgery (2.9.0)
-
CWE-352
High
WordPress Plugin WatchMan-Site7 Cross-Site Request Forgery (3.0.2)
-
CWE-352
High
WordPress Plugin Companion Sitemap Generator Cross-Site Request Forgery (3.6.6)
CVE-2019-15113
CWE-352
High
WordPress Plugin Comprehensive Google Map Cross-Site Request Forgery (9.1.3)
-
CWE-352
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Request Forgery (5.6)
-
CWE-352
High
WordPress Plugin MapSVG Lite Cross-Site Request Forgery (4.2.4)
-
CWE-352
High
WordPress Plugin Two Factor Authentication Cross-Site Request Forgery (1.3.12)
CVE-2018-20231
CWE-352
High
WordPress Plugin WP Construction Mode Cross-Site Request Forgery (3.31)
-
CWE-352
High
WordPress Plugin Campaign URL Builder Cross-Site Request Forgery (1.5.0)
-
CWE-352
High
WordPress Plugin FormCraft-Contact Form Builder Cross-Site Request Forgery (1.2.1)
CVE-2019-5920
CWE-352
High
WordPress Plugin Simba Plugin Updates Manager Multiple Cross-Site Request Forgery Vulnerabilities (1.6.16)
-
CWE-352
High
WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.9.60)
-
CWE-352
High
WordPress Plugin Asgaros Forum Cross-Site Request Forgery (1.5.8)
-
CWE-352
High
WordPress Plugin WP Job Manager Cross-Site Request Forgery (1.25.2)
-
CWE-352
High
WordPress Plugin Multisite Post Duplicator Cross-Site Request Forgery (0.9.5.1)
-
CWE-352
High
WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5)
-
CWE-352
High
WordPress Plugin ByREV WP-PICShield Cross-Site Request Forgery (1.9.7)
-
CWE-352
High
WordPress Plugin File Manager Cross-Site Request Forgery (3.0.1)
-
CWE-352
High
WordPress Plugin Global Content Blocks Cross-Site Request Forgery (2.1.5)
-
CWE-352
High
WordPress Plugin YouTube Cross-Site Request Forgery (11.8.1)
-
CWE-352
High
WordPress Plugin WHIZZ Cross-Site Request Forgery (1.1)
CVE-2017-8099
CWE-352
High
WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.8.99)
-
CWE-352
High
WordPress Plugin Popup by Supsystic Cross-Site Request Forgery (1.7.8)
-
CWE-352
High
WordPress Plugin BuddyPress Multiple Cross-Site Request Forgery Vulnerabilities (2.8.1)
-
CWE-352
High
WordPress Plugin PayPal Digital Downloads Cross-Site Request Forgery (1.4)
-
CWE-352
High
WordPress Plugin Share Buttons by AddThis Cross-Site Request Forgery (5.3.5)
-
CWE-352
High
WordPress Plugin Salon Booking System Cross-Site Request Forgery (3.13.1)
-
CWE-352
High
WordPress Plugin CopySafe Web Protection Cross-Site Request Forgery (2.5)
CVE-2017-8100
CWE-352
High
WordPress Plugin Attachment File Icons (AF Icons) Cross-Site Request Forgery (1.3)
CVE-2024-6309
CWE-352
High
WordPress Plugin Contact Form 7-PayPal Add-on Cross-Site Request Forgery (1.3.4)
-
CWE-352
High
WordPress Plugin Business Directory-Easy Listing Directories for WordPress Cross-Site Request Forgery (4.1.12.1)
-
CWE-352
High
WordPress Plugin FD Feedburner Cross-Site Request Forgery (1.42)
-
CWE-352
High
WordPress Plugin Clean Login Cross-Site Request Forgery (1.7.12)
CVE-2017-8875
CWE-352
High
WordPress Plugin Triagis WordPress Security Evaluation-Check Folder Permissions, Fix For Common Security Vulnerabilities Multiple Cross-Site Request Forgery Vulnerabilities (1.15)
-
CWE-352
High
GraphQL Non-JSON Queries over POST: Potential CSRF Vulnerability
-
CWE-352
Medium
GraphQL Non-JSON Queries over GET: Potential CSRF Vulnerability
-
CWE-352
Medium
Cross-Site Request Forgery (CSRF) (CMS Made Simple)
CVE-2016-7904
CWE-352
Medium
Apache 2.x version older than 2.2.9
CVE-2008-2364
CWE-399
Medium
Apache Tomcat version older than 7.0.32
CVE-2012-4431
CWE-264
Medium
GraphQL Non-JSON Mutations over GET: Potential CSRF Vulnerability
-
CWE-352
Medium
Possible CSRF (Cross-site request forgery)
-
CWE-352
Low
ASP.NET ViewStateUserKey Is Not Set
-
CWE-642
Low