Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cms Tag: cwe-352 Clear
ID Title
CVE-2026-17522 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-17522)
vulnerability in wordpress (CVE-2026-17522). Risk of unauthorized operations or information disclosure.
CVE-2026-76549 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-76549)
vulnerability in wordpress (CVE-2026-76549). Data can be tampered with by attackers.
CVE-2026-15046 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
CVE-2026-66602 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-66602)
vulnerability in wordpress (CVE-2026-66602). Successful exploitation can lead to full system takeover.
CVE-2026-17608 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-17608)
vulnerability in wordpress (CVE-2026-17608). Data can be tampered with by attackers.
CVE-2026-15384 Authentication Bypass in wordpress (CVE-2026-15384)
authentication bypass in wordpress (CVE-2026-15384). Data can be tampered with by attackers.
CVE-2025-10308 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2025-10308)
vulnerability in wordpress (CVE-2025-10308). Risk of unauthorized operations or information disclosure.
CVE-2026-19088 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-19088)
vulnerability in wordpress (CVE-2026-19088). Risk of unauthorized operations or information disclosure.
CVE-2026-19074 Information Disclosure in wordpress (CVE-2026-19074)
vulnerability in wordpress (CVE-2026-19074). Risk of unauthorized operations or information disclosure. Exploitable via ``acadp_public_custom_fields_listings``.
CVE-2026-16965 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16965)
vulnerability in wordpress (CVE-2026-16965). Risk of unauthorized operations or information disclosure.
CVE-2026-16262 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16262)
vulnerability in wordpress (CVE-2026-16262). Risk of unauthorized operations or information disclosure.
CVE-2026-14313 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14313)
vulnerability in wordpress (CVE-2026-14313). Risk of unauthorized operations or information disclosure.
CVE-2026-14204 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-14204)
vulnerability in wordpress (CVE-2026-14204). Data can be tampered with by attackers.
CVE-2026-7444 The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
CVE-2026-17515 Information Disclosure in wordpress (CVE-2026-17515)
vulnerability in wordpress (CVE-2026-17515). Risk of unauthorized operations or information disclosure.
CVE-2026-16613 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16613)
vulnerability in wordpress (CVE-2026-16613). Risk of unauthorized operations or information disclosure.
CVE-2026-16292 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16292)
vulnerability in wordpress (CVE-2026-16292). Risk of unauthorized operations or information disclosure.
CVE-2026-12586 Authentication Bypass in wordpress (CVE-2026-12586)
authentication bypass in wordpress (CVE-2026-12586). Successful exploitation can lead to full system takeover.
CVE-2025-14469 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2025-14469)
vulnerability in wordpress (CVE-2025-14469). Risk of unauthorized operations or information disclosure.
CVE-2026-15988 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15988)
vulnerability in wordpress (CVE-2026-15988). Successful exploitation can lead to full system takeover.
CVE-2026-13729 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13729)
vulnerability in wordpress (CVE-2026-13729). Risk of unauthorized operations or information disclosure.
CVE-2026-5582 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-5582)
vulnerability in wordpress (CVE-2026-5582). Risk of unauthorized operations or information disclosure.
CVE-2026-14239 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14239)
cross-site scripting in wordpress (CVE-2026-14239). Risk of unauthorized operations or information disclosure.
CVE-2026-9720 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9720)
vulnerability in wordpress (CVE-2026-9720). Risk of unauthorized operations or information disclosure.
CVE-2026-14234 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
CVE-2026-15136 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
CVE-2026-15212 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15212)
vulnerability in wordpress (CVE-2026-15212). Successful exploitation can lead to full system takeover.
CVE-2026-13156 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13156)
vulnerability in wordpress (CVE-2026-13156). Risk of unauthorized operations or information disclosure.
CVE-2026-9734 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9734)
vulnerability in wordpress (CVE-2026-9734). Risk of unauthorized operations or information disclosure.
CVE-2026-15005 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15005)
vulnerability in wordpress (CVE-2026-15005). Successful exploitation can lead to full system takeover.
CVE-2026-11866 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11866)
vulnerability in wordpress (CVE-2026-11866). Risk of unauthorized operations or information disclosure.
CVE-2026-12409 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12409)
vulnerability in wordpress (CVE-2026-12409). Risk of unauthorized operations or information disclosure.
CVE-2026-15080 Cross-Site Request Forgery (CSRF) in drupal (CVE-2026-15080)
vulnerability in drupal (CVE-2026-15080). Risk of unauthorized operations or information disclosure.
CVE-2026-13243 Cross-Site Request Forgery (CSRF) in drupal/salesforce (CVE-2026-13243)
vulnerability in drupal/salesforce (CVE-2026-13243). Risk of unauthorized operations or information disclosure. Exploitable via ``salesforce_oauth``. Mitigation: upgrade to `5.1.3` or later.
CVE-2026-6440 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6440)
vulnerability in wordpress (CVE-2026-6440). Risk of unauthorized operations or information disclosure.
CVE-2026-15070 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15070)
vulnerability in wordpress (CVE-2026-15070). Successful exploitation can lead to full system takeover.
CVE-2026-4275 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4275)
vulnerability in wordpress (CVE-2026-4275). Successful exploitation can lead to full system takeover.
CVE-2026-12002 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12002)
vulnerability in wordpress (CVE-2026-12002). Risk of unauthorized operations or information disclosure.
CVE-2026-9731 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9731)
vulnerability in wordpress (CVE-2026-9731). Risk of unauthorized operations or information disclosure.
CVE-2026-12158 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12158)
vulnerability in wordpress (CVE-2026-12158). Successful exploitation can lead to full system takeover.
CVE-2026-11981 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11981)
vulnerability in wordpress (CVE-2026-11981). Risk of unauthorized operations or information disclosure.
CVE-2026-8944 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8944)
vulnerability in wordpress (CVE-2026-8944). Risk of unauthorized operations or information disclosure.
CVE-2026-13422 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-13422)
vulnerability in wordpress (CVE-2026-13422). Risk of unauthorized operations or information disclosure.
CVE-2026-9724 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9724)
vulnerability in wordpress (CVE-2026-9724). Risk of unauthorized operations or information disclosure.
CVE-2026-9721 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9721)
vulnerability in wordpress (CVE-2026-9721). Risk of unauthorized operations or information disclosure.
CVE-2026-8905 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8905)
vulnerability in wordpress (CVE-2026-8905). Risk of unauthorized operations or information disclosure.
CVE-2026-6292 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6292)
vulnerability in wordpress (CVE-2026-6292). Risk of unauthorized operations or information disclosure.
CVE-2026-11997 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11997)
vulnerability in wordpress (CVE-2026-11997). Risk of unauthorized operations or information disclosure.
CVE-2026-10552 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-10552)
vulnerability in wordpress (CVE-2026-10552). Risk of unauthorized operations or information disclosure.
CVE-2026-11775 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-11775)
vulnerability in wordpress (CVE-2026-11775). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →