Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82468 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-82468)
vulnerability in csrf (CVE-2026-82468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82277 |
|
Vulnerability in csrf (CVE-2026-82277)
vulnerability in csrf (CVE-2026-82277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81733 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-81733)
vulnerability in csrf (CVE-2026-81733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78610 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-78610)
vulnerability in csrf (CVE-2026-78610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80210 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-80210)
vulnerability in csrf (CVE-2026-80210). Data can be tampered with by attackers.
|
| CVE-2026-81273 |
|
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
|
| CVE-2026-81271 |
|
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
|
| CVE-2026-76549 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-76549)
vulnerability in wordpress (CVE-2026-76549). Data can be tampered with by attackers.
|
| CVE-2025-56798 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-56798)
vulnerability in csrf (CVE-2025-56798). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48549 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48549)
vulnerability in csrf (CVE-2026-48549). Data can be tampered with by attackers. Exploitable via `Cookie header`.
|
| CVE-2026-48548 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48548)
vulnerability in csrf (CVE-2026-48548). Data can be tampered with by attackers.
|
| CVE-2026-62862 |
|
Vulnerability in csrf (CVE-2026-62862)
vulnerability in csrf (CVE-2026-62862). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72701 |
|
Vulnerability in csrf (CVE-2026-72701)
vulnerability in csrf (CVE-2026-72701). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56706 |
|
Vulnerability in csrf (CVE-2026-56706)
vulnerability in csrf (CVE-2026-56706). Data can be tampered with by attackers.
|
| CVE-2026-78279 |
|
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
|
| CVE-2026-78280 |
|
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
|
| CVE-2026-67358 |
|
Cross-Site Request Forgery (CSRF) in c (CVE-2026-67358)
vulnerability in c (CVE-2026-67358). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67360 |
|
Vulnerability in c (CVE-2026-67360)
vulnerability in c (CVE-2026-67360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67361 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67361)
vulnerability in csrf (CVE-2026-67361). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77029 |
|
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
|
| CVE-2026-15046 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15046)
vulnerability in wordpress (CVE-2026-15046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54256 |
|
Vulnerability in winter/wn-backend-module (CVE-2026-54256)
vulnerability in winter/wn-backend-module (CVE-2026-54256). Risk of unauthorized operations or information disclosure. Exploitable via ``FileUpload``. Mitigation: upgrade to `1.2.13` or later.
|
| CVE-2026-64962 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-64962)
vulnerability in csrf (CVE-2026-64962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28164 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-28164)
vulnerability in csrf (CVE-2026-28164). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63722 |
|
Vulnerability in csrf (CVE-2026-63722)
vulnerability in csrf (CVE-2026-63722). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75952 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-75952)
vulnerability in csrf (CVE-2026-75952). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75949 |
|
Unrestricted File Upload in csrf (CVE-2026-75949)
vulnerability in csrf (CVE-2026-75949). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67364 |
|
Code Injection in c (CVE-2026-67364)
code injection in c (CVE-2026-67364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67363 |
|
Vulnerability in csrf (CVE-2026-67363)
vulnerability in csrf (CVE-2026-67363). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66602 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-66602)
vulnerability in wordpress (CVE-2026-66602). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16732 |
|
Vulnerability in csrf (CVE-2026-16732)
vulnerability in csrf (CVE-2026-16732). Confidential information can be exposed externally.
|
| CVE-2026-55593 |
|
Cross-Site Request Forgery (CSRF) in froxlor/froxlor (CVE-2026-55593)
vulnerability in froxlor/froxlor (CVE-2026-55593). Data can be tampered with by attackers. Exploitable via ``allowed_from``. Mitigation: upgrade to `2.3.8` or later.
|
| CVE-2026-67921 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67921)
vulnerability in csrf (CVE-2026-67921). Confidential information can be exposed externally.
|
| CVE-2026-61696 |
|
Vulnerability in csrf (CVE-2026-61696)
vulnerability in csrf (CVE-2026-61696). Confidential information can be exposed externally.
|
| CVE-2026-68923 |
|
Cross-Site Request Forgery (CSRF) in mobsf (CVE-2026-68923)
vulnerability in mobsf (CVE-2026-68923). Data can be tampered with by attackers. Exploitable via ``CsrfViewMiddleware``. Mitigation: upgrade to `4.5.1` or later.
|
| CVE-2026-45126 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-45126)
vulnerability in csrf (CVE-2026-45126). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66635 |
|
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
|
| CVE-2026-17087 |
|
Vulnerability in wordpress (CVE-2026-17087)
vulnerability in wordpress (CVE-2026-17087). Confidential information can be exposed externally.
|
| CVE-2026-9767 |
|
SQL Injection in wordpress (CVE-2026-9767)
SQL injection in wordpress (CVE-2026-9767). Confidential information can be exposed externally.
|
| CVE-2026-15384 |
|
Authentication Bypass in wordpress (CVE-2026-15384)
authentication bypass in wordpress (CVE-2026-15384). Data can be tampered with by attackers.
|
| CVE-2026-18165 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-18165)
vulnerability in csrf (CVE-2026-18165). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67366 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67366)
vulnerability in csrf (CVE-2026-67366). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19636 |
|
Vulnerability in csrf (CVE-2026-19636)
vulnerability in csrf (CVE-2026-19636). Data can be tampered with by attackers.
|
| CVE-2026-73847 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73847)
vulnerability in csrf (CVE-2026-73847). Confidential information can be exposed externally.
|
| CVE-2026-57469 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57469)
vulnerability in csrf (CVE-2026-57469). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17069 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-17069)
vulnerability in csrf (CVE-2026-17069). Confidential information can be exposed externally.
|
| CVE-2026-73482 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73482)
vulnerability in csrf (CVE-2026-73482). Data can be tampered with by attackers.
|
| CVE-2026-73481 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73481)
vulnerability in csrf (CVE-2026-73481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73575 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73575)
vulnerability in csrf (CVE-2026-73575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67990 |
|
Cross-Site Request Forgery (CSRF) in rails (CVE-2026-67990)
vulnerability in rails (CVE-2026-67990). Risk of unauthorized operations or information disclosure.
|