CSRF

Cross-Site Request Forgery
6 CVEs tagged.

CVE-2026-1447 5.4

The Mail Mint WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to 1.19.2, allowing unauthenticated attackers to ...

Feb 3, 2026
CVE-2026-20704 4.3

A cross-site request forgery (CSRF) vulnerability exists in ELECOM WRC-X1500GS-B and WRC-X1500GSA-B wireless routers. Attackers can trick authenticate...

Feb 3, 2026
CVE-2026-25221 N/A

PolarLearn's OAuth 2.0 implementation for GitHub and Google login is vulnerable to Login CSRF due to missing state parameter validation. This allows a...

Feb 2, 2026
CVE-2026-24007 4.6

This CSRF vulnerability in Tuleap allows attackers to trick authenticated users into performing unauthorized actions, specifically creating artifact l...

Feb 2, 2026
CVE-2026-0658 4.3

The Five Star Restaurant Reservations WordPress plugin before version 2.7.9 lacks CSRF protection on some bulk actions, allowing attackers to trick lo...

Feb 2, 2026
CVE-2026-1745 4.3

This vulnerability allows attackers to perform Cross-Site Request Forgery (CSRF) attacks against the Medical Certificate Generator App 1.0, enabling u...

Feb 2, 2026