CWE-352

CVE-2022-36389

February 23, 2023 by godfreyd94

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress.

CVE-2022-36401

February 23, 2023 by godfreyd94

Cross-Site Request Forgery (CSRF) vulnerability in TeraWallet – For WooCommerce plugin <= 1.3.24 versions.

CVE-2022-36417

February 23, 2023 by godfreyd94

Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in 3D Tag Cloud plugin <= 3.8 at WordPress.

CVE-2022-36288

February 23, 2023 by godfreyd94

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

CVE-2022-36292

February 23, 2023 by godfreyd94

Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

CVE-2022-36312

February 23, 2023 by godfreyd94

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB’s web management UI. This issue may affect other AirVelocity and AirSpeed models.