Filtered by CWE-352
Filtered by vendor Subscriptions
Total 8090 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10819 1 Binary-husky 1 Gpt Academic 2025-07-14 8.8 High
A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user into uploading files without their consent, exploiting their session. This can lead to unauthorized file uploads and potential system compromise. The uploaded file can contain malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. Through stored XSS, an attacker can steal information about the victim and perform any action on their behalf.
CVE-2025-7379 1 Asustor 2 Adm, Datasync Center 2025-07-14 N/A
A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from 1.2.0 before 1.2.0.r206.
CVE-2025-53265 1 Wordpress 1 Wordpress 2025-07-14 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Elena Yamshikova Virusdie allows Cross Site Request Forgery. This issue affects Virusdie: from n/a through 1.1.3.
CVE-2025-53329 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in szajenw Społecznościowa 6 PL 2013 allows Stored XSS. This issue affects Społecznościowa 6 PL 2013: from n/a through 2.0.6.
CVE-2025-53267 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Aftab Husain Hide Admin Bar From Front End allows Cross Site Request Forgery. This issue affects Hide Admin Bar From Front End: from n/a through 1.0.0.
CVE-2025-53264 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Konrád Koller ONet Regenerate Thumbnails allows Cross Site Request Forgery. This issue affects ONet Regenerate Thumbnails: from n/a through 1.5.
CVE-2025-53197 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in cookiebot Cookiebot allows Cross Site Request Forgery. This issue affects Cookiebot: from n/a through 4.5.8.
CVE-2025-53261 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in macbookandrew WP YouTube Live allows Cross Site Request Forgery. This issue affects WP YouTube Live: from n/a through 1.10.0.
CVE-2025-53313 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite allows Stored XSS. This issue affects Twitch TV Embed Suite: from n/a through 2.1.0.
CVE-2025-53269 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in imw3 My Wp Brand allows Cross Site Request Forgery. This issue affects My Wp Brand: from n/a through 1.1.3.
CVE-2025-53272 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in opicron Image Cleanup allows Cross Site Request Forgery. This issue affects Image Cleanup: from n/a through 1.9.2.
CVE-2025-53314 1 Wordpress 1 Wordpress 2025-07-14 9.6 Critical
Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer allows SQL Injection. This issue affects WP Optimizer: from n/a through 2.3.6.
CVE-2025-53254 1 Wordpress 1 Wordpress 2025-07-14 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in webcraftic Cyrlitera allows Cross Site Request Forgery. This issue affects Cyrlitera: from n/a through 1.2.0.
CVE-2025-53308 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in gopi_plus Image Slider With Description allows Stored XSS. This issue affects Image Slider With Description: from n/a through 9.2.
CVE-2025-53263 1 Wordpress 1 Wordpress 2025-07-14 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in PluginsCafe Address Autocomplete via Google for Gravity Forms allows Cross Site Request Forgery. This issue affects Address Autocomplete via Google for Gravity Forms: from n/a through 1.3.4.
CVE-2025-50370 2 Anujk305, Phpgurukul 2 Medical Card Generation System, Medical Card Generation System 2025-07-14 6.5 Medium
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.
CVE-2025-5936 2 Vr Calendar Project, Wordpress 2 Vr Calendar, Wordpress 2025-07-14 4.3 Medium
The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.7. This is due to missing or incorrect nonce validation on the syncCalendar() function. This makes it possible for unauthenticated attackers to trigger a calendar sync via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2025-53310 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Funnnny HidePost allows Reflected XSS. This issue affects HidePost: from n/a through 2.3.8.
CVE-2025-53317 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in AcmeeDesign WPShapere Lite allows Stored XSS. This issue affects WPShapere Lite: from n/a through 1.4.
CVE-2025-53331 1 Wordpress 1 Wordpress 2025-07-14 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in samcharrington RSS Digest allows Stored XSS. This issue affects RSS Digest: from n/a through 1.5.