| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11. |
| NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter. |
| The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php. |
| The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF. |
| The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. |
| The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF. |
| The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS. |
| The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter. |
| The wp-d3 plugin before 2.4.1 for WordPress has CSRF. |
| The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF. |
| The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF. |
| The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location. |
| The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. |
| The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. |
| The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file. |
| The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF. |
| The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools. |
| The wp-editor plugin before 1.2.6 for WordPress has CSRF. |
| The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. |
| The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users. |