共收录 796 条相关情报。
← 返回所有主题CVE-2026-6400
The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions
CVE-2026-6395
The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting
CVE-2026-6391
The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in
CVE-2026-45773
### Impact Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost cal
CVE-2026-8604
In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a vic
## Summary dynoxide's MCP HTTP transport was vulnerable to DNS rebinding via its transitive `rmcp` dependency, plus a r
CVE-2018-25337
Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized
CVE-2018-25327
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform sta
CVE-2018-25334
Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's informa
CVE-2018-25336
Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify us
CVE-2018-25321
TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform u
CVE-2020-37241
bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative a
CVE-2021-47976
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload a
CVE-2021-47976
TextPattern CMS 4.9.0-dev 存在一个远程代码执行漏洞。攻击者首先需要进行认证，然后从插件事件页面获取 CSRF 令牌，利用插件上传功能上传恶意的 PHP 文件到 textpattern/tmp/ 目录，从而实现代码执
CVE-2020-37241
bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative a
CVE-2026-45317
Open WebUI 是一个自托管的人工智能平台，设计为完全离线运行。在 0.9.3 版本之前，其图像上传功能存在一个应用程序范围内的跨站请求伪造（CSRF）漏洞。攻击者可以通过设置一个指向恶意端点的图像 URL，诱使受害者查看该图像（例如
CVE-2026-45610
## Summary **Type:** Cross-site request forgery on the 2FA toggle. `plugin/LoginControl/set.json.php` accepts `POST typ
### Am I affected? Users are affected if all of the following are true: - The application uses `better-auth` at a vers
CVE-2026-45773
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-
CVE-2026-8425
The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1