openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. (CVSS:0.0) (Last Update:2019-08-23)

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on an authenticated administrator. (CVSS:0.0) (Last Update:2019-08-23)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF. (CVSS:0.0) (Last Update:2019-08-22)

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. (CVSS:0.0) (Last Update:2019-08-20)

In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function. (CVSS:0.0) (Last Update:2019-08-19)

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page. (CVSS:0.0) (Last Update:2019-08-20)

The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF. (CVSS:0.0) (Last Update:2019-08-16)

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF. (CVSS:0.0) (Last Update:2019-08-16)