Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: csrf Clear
ID Title
CVE-2026-82468 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-82468)
vulnerability in csrf (CVE-2026-82468). Risk of unauthorized operations or information disclosure.
CVE-2026-82277 Vulnerability in csrf (CVE-2026-82277)
vulnerability in csrf (CVE-2026-82277). Successful exploitation can lead to full system takeover.
CVE-2026-81733 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-81733)
vulnerability in csrf (CVE-2026-81733). Risk of unauthorized operations or information disclosure.
CVE-2026-78610 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-78610)
vulnerability in csrf (CVE-2026-78610). Risk of unauthorized operations or information disclosure.
CVE-2026-80210 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-80210)
vulnerability in csrf (CVE-2026-80210). Data can be tampered with by attackers.
CVE-2026-81273 Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
CVE-2026-81271 Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
CVE-2026-76549 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-76549)
vulnerability in wordpress (CVE-2026-76549). Data can be tampered with by attackers.
CVE-2025-56798 Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-56798)
vulnerability in csrf (CVE-2025-56798). Successful exploitation can lead to full system takeover.
CVE-2026-48549 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48549)
vulnerability in csrf (CVE-2026-48549). Data can be tampered with by attackers. Exploitable via `Cookie header`.
CVE-2026-48548 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48548)
vulnerability in csrf (CVE-2026-48548). Data can be tampered with by attackers.
CVE-2026-62862 Vulnerability in csrf (CVE-2026-62862)
vulnerability in csrf (CVE-2026-62862). Risk of unauthorized operations or information disclosure.
CVE-2026-72701 Vulnerability in csrf (CVE-2026-72701)
vulnerability in csrf (CVE-2026-72701). Risk of unauthorized operations or information disclosure.
CVE-2026-56706 Vulnerability in csrf (CVE-2026-56706)
vulnerability in csrf (CVE-2026-56706). Data can be tampered with by attackers.
CVE-2026-78279 Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78280 Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
CVE-2026-67358 Cross-Site Request Forgery (CSRF) in c (CVE-2026-67358)
vulnerability in c (CVE-2026-67358). Risk of unauthorized operations or information disclosure.
CVE-2026-67360 Vulnerability in c (CVE-2026-67360)
vulnerability in c (CVE-2026-67360). Risk of unauthorized operations or information disclosure.
CVE-2026-67361 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67361)
vulnerability in csrf (CVE-2026-67361). Risk of unauthorized operations or information disclosure.
CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
CVE-2026-15046 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
CVE-2026-54256 Vulnerability in winter/wn-backend-module (CVE-2026-54256)
vulnerability in winter/wn-backend-module (CVE-2026-54256). Risk of unauthorized operations or information disclosure. Exploitable via ``FileUpload``. Mitigation: upgrade to `1.2.13` or later.
CVE-2026-64962 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-64962)
vulnerability in csrf (CVE-2026-64962). Risk of unauthorized operations or information disclosure.
CVE-2026-28164 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-28164)
vulnerability in csrf (CVE-2026-28164). Successful exploitation can lead to full system takeover.
CVE-2026-63722 Vulnerability in csrf (CVE-2026-63722)
vulnerability in csrf (CVE-2026-63722). Successful exploitation can lead to full system takeover.
CVE-2026-75952 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-75952)
vulnerability in csrf (CVE-2026-75952). Risk of unauthorized operations or information disclosure.
CVE-2026-75949 Unrestricted File Upload in csrf (CVE-2026-75949)
vulnerability in csrf (CVE-2026-75949). Risk of unauthorized operations or information disclosure.
CVE-2026-67364 Code Injection in c (CVE-2026-67364)
code injection in c (CVE-2026-67364). Risk of unauthorized operations or information disclosure.
CVE-2026-67363 Vulnerability in csrf (CVE-2026-67363)
vulnerability in csrf (CVE-2026-67363). Risk of unauthorized operations or information disclosure.
CVE-2026-66602 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-66602)
vulnerability in wordpress (CVE-2026-66602). Successful exploitation can lead to full system takeover.
CVE-2026-16732 Vulnerability in csrf (CVE-2026-16732)
vulnerability in csrf (CVE-2026-16732). Confidential information can be exposed externally.
CVE-2026-55593 Cross-Site Request Forgery (CSRF) in froxlor/froxlor (CVE-2026-55593)
vulnerability in froxlor/froxlor (CVE-2026-55593). Data can be tampered with by attackers. Exploitable via ``allowed_from``. Mitigation: upgrade to `2.3.8` or later.
CVE-2026-67921 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67921)
vulnerability in csrf (CVE-2026-67921). Confidential information can be exposed externally.
CVE-2026-61696 Vulnerability in csrf (CVE-2026-61696)
vulnerability in csrf (CVE-2026-61696). Confidential information can be exposed externally.
CVE-2026-68923 Cross-Site Request Forgery (CSRF) in mobsf (CVE-2026-68923)
vulnerability in mobsf (CVE-2026-68923). Data can be tampered with by attackers. Exploitable via ``CsrfViewMiddleware``. Mitigation: upgrade to `4.5.1` or later.
CVE-2026-45126 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-45126)
vulnerability in csrf (CVE-2026-45126). Risk of unauthorized operations or information disclosure.
CVE-2026-66635 Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
CVE-2026-17087 Vulnerability in wordpress (CVE-2026-17087)
vulnerability in wordpress (CVE-2026-17087). Confidential information can be exposed externally.
CVE-2026-9767 SQL Injection in wordpress (CVE-2026-9767)
SQL injection in wordpress (CVE-2026-9767). Confidential information can be exposed externally.
CVE-2026-15384 Authentication Bypass in wordpress (CVE-2026-15384)
authentication bypass in wordpress (CVE-2026-15384). Data can be tampered with by attackers.
CVE-2026-18165 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-18165)
vulnerability in csrf (CVE-2026-18165). Risk of unauthorized operations or information disclosure.
CVE-2026-67366 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67366)
vulnerability in csrf (CVE-2026-67366). Risk of unauthorized operations or information disclosure.
CVE-2026-19636 Vulnerability in csrf (CVE-2026-19636)
vulnerability in csrf (CVE-2026-19636). Data can be tampered with by attackers.
CVE-2026-73847 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73847)
vulnerability in csrf (CVE-2026-73847). Confidential information can be exposed externally.
CVE-2026-57469 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57469)
vulnerability in csrf (CVE-2026-57469). Risk of unauthorized operations or information disclosure.
CVE-2026-17069 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-17069)
vulnerability in csrf (CVE-2026-17069). Confidential information can be exposed externally.
CVE-2026-73482 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73482)
vulnerability in csrf (CVE-2026-73482). Data can be tampered with by attackers.
CVE-2026-73481 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73481)
vulnerability in csrf (CVE-2026-73481). Risk of unauthorized operations or information disclosure.
CVE-2026-73575 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73575)
vulnerability in csrf (CVE-2026-73575). Risk of unauthorized operations or information disclosure.
CVE-2026-67990 Cross-Site Request Forgery (CSRF) in rails (CVE-2026-67990)
vulnerability in rails (CVE-2026-67990). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →