CSRF - CVE CyberSecurity Database News (Page 12)

CVE-2023-5382: Funnelforms Plugin for WordPress Cross-Site Request Forgery (CSRF) Vulnerability

The Funnelforms Free plugin for WordPress allows users to easily create and manage forms on their websites. Unfortunately, a security vulnerability was recently discovered in

Nov 22, 2023 CSRF WordPress Exploit PHP funnelforms Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free

CVE-2023-5383 - Funnelforms Free WordPress Plugin 3.4 Vulnerable to Cross-Site Request Forgery (CSRF)

--- Introduction The Funnelforms Free plugin for WordPress - an essential tool for managing online forms - has a security vulnerability in versions up to

Nov 22, 2023 CSRF WordPress Exploit PHP Userproplugin Userpro

CVE-2023-2440 - Critical Vulnerability in UserPro Plugin for WordPress: Cross-Site Request Forgery Leading to Privilege Escalation

The popular UserPro plugin for WordPress is facing a critical vulnerability due to Cross-Site Request Forgery (CSRF) in versions up to, and including, 5.1.

Nov 18, 2023 CSRF WordPress Exploit Patreon Patreon WordPress

CVE-2023-41129 - Cross-Site Request Forgery (CSRF) vulnerability in Patreon WordPress affects plugin versions up to 1.8.6

Patreon is a popular membership platform that provides tools for creators to run a subscription content service. To integrate Patreon with WordPress powered websites, Patreon

Nov 18, 2023 CSRF Exploit PHP Marco Milesi ANAC XML Bandi di Gara

CVE-2023-47655 - Cross-Site Request Forgery (CSRF) Vulnerability in Marco Milesi ANAC XML Bandi di Gara

A Cross-Site Request Forgery (CSRF) vulnerability has been discovered in Marco Milesi's ANAC XML Bandi di Gara software, a web-based solution utilized by