# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress Navayan Subscribe plugin <= 1.13 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53311.md)
  `CVE-2025-53311` · CVE record: Amol Nirmala Waman Navayan Subscribe · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress HidePost plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53310.md)
  `CVE-2025-53310` · CVE record: Funnnny HidePost · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53308.md)
  `CVE-2025-53308` · CVE record: gopi_plus Image Slider With Description · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Forum Server plugin <= 1.8.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53305.md)
  `CVE-2025-53305` · CVE record: lucidcrew WP Forum Server · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress IS-theme-companion plugin <= 1.59 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53277.md)
  `CVE-2025-53277` · CVE record: Infigo Software IS-theme-companion · CVSS 8.8 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Permalink Translator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53274.md)
  `CVE-2025-53274` · CVE record: Hossin Asaadi WP Permalink Translator · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Slickstream plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53273.md)
  `CVE-2025-53273` · CVE record: Slickstream Slickstream · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Image Cleanup plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53272.md)
  `CVE-2025-53272` · CVE record: opicron Image Cleanup · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Additional Order Filters for WooCommerce plugin <= 1.22 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability](https://agentprime.io/advisories/CVE-2025-53271.md)
  `CVE-2025-53271` · CVE record: Anton Bond Additional Order Filters for WooCommerce · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress CTA plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53270.md)
  `CVE-2025-53270` · CVE record: Blend Media WordPress CTA · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress My Wp Brand plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53269.md)
  `CVE-2025-53269` · CVE record: imw3 My Wp Brand · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Import external attachments plugin <= 1.5.12 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53268.md)
  `CVE-2025-53268` · CVE record: ryanpcmcquen Import external attachments · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Hide Admin Bar From Front End plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53267.md)
  `CVE-2025-53267` · CVE record: Aftab Husain Hide Admin Bar From Front End · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53265.md)
  `CVE-2025-53265` · CVE record: Virusdie Virusdie · CVSS 5.4 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress ONet Regenerate Thumbnails plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53264.md)
  `CVE-2025-53264` · CVE record: Konrád Koller ONet Regenerate Thumbnails · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Address Autocomplete via Google for Gravity Forms plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53263.md)
  `CVE-2025-53263` · CVE record: PluginsCafe Address Autocomplete via Google for Gravity Forms · CVSS 5.4 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Writesonic plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53262.md)
  `CVE-2025-53262` · CVE record: Writesonic Writesonic · CVSS 5.4 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53261.md)
  `CVE-2025-53261` · CVE record: macbookandrew WP YouTube Live · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53254.md)
  `CVE-2025-53254` · CVE record: Themeisle Cyrlitera · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53203.md)
  `CVE-2025-53203` · CVE record: EDGARROJAS WooCommerce PDF Invoice Builder · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Cookiebot plugin <= 4.5.8 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53197.md)
  `CVE-2025-53197` · CVE record: cookiebot Cookiebot · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Burst Statistics plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53193.md)
  `CVE-2025-53193` · CVE record: Burst Statistics B.V. Burst Statistics · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress DarkMySite plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-32281.md)
  `CVE-2025-32281` · CVE record: DarkMySite DarkMySite · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [VR Calendar <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync](https://agentprime.io/advisories/CVE-2025-5936.md)
  `CVE-2025-5936` · CVE record: innate-images-llc VR Calendar · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0.](https://agentprime.io/advisories/CVE-2025-50370.md)
  `CVE-2025-50370` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0.](https://agentprime.io/advisories/CVE-2025-50369.md)
  `CVE-2025-50369` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079](https://agentprime.io/advisories/CVE-2025-48921.md)
  `CVE-2025-48921` · CVE record: Drupal Open Social · CVSS 8.8 High · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in iroha Soft Co., Ltd. iroha Board](https://agentprime.io/advisories/CVE-2025-48497.md)
  `CVE-2025-48497` · CVE record: iroha Soft Co., Ltd. iroha Board · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [Homerunner <= 1.0.30 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-5932.md)
  `CVE-2025-5932` · CVE record: coolrunner Homerunner · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [CodeAstro Patient Record Management System cross-site request forgery](https://agentprime.io/advisories/CVE-2025-6664.md)
  `CVE-2025-6664` · CVE record: CodeAstro Patient Record Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Tuleap missing CSRF protection on tracker reports manipulation](https://agentprime.io/advisories/CVE-2025-50179.md)
  `CVE-2025-50179` · CVE record: Enalean tuleap · CVSS 4.6 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [Tuleap missing CSRF protection on tracker canned responses administration](https://agentprime.io/advisories/CVE-2025-48991.md)
  `CVE-2025-48991` · CVE record: Enalean tuleap · CVSS 4.6 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [CodeAstro Expense Management System cross-site request forgery](https://agentprime.io/advisories/CVE-2025-6478.md)
  `CVE-2025-6478` · CVE record: CodeAstro Expense Management System · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [SourceCodester Gym Management System cross-site request forgery](https://agentprime.io/advisories/CVE-2025-6476.md)
  `CVE-2025-6476` · CVE record: SourceCodester Gym Management System · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Cross-Site Request Forgery (CSRF) in GitLab](https://agentprime.io/advisories/CVE-2024-4994.md)
  `CVE-2024-4994` · CVE record: GitLab GitLab · CVSS 8.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress ClipLink plugin <= 1.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49964.md)
  `CVE-2025-49964` · CVE record: indgeek ClipLink · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress PixelBeds Channel Manager and Hotel Booking Engine plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49965.md)
  `CVE-2025-49965` · CVE record: Oganro PixelBeds Channel Manager and Hotel Booking Engine · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Oganro Travel Portal Search Widget for HotelBeds APITUDE API plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49966.md)
  `CVE-2025-49966` · CVE record: Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Live Sports Streamthunder plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49967.md)
  `CVE-2025-49967` · CVE record: marcusjansen Live Sports Streamthunder · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress XML Travel Portal Widget plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49968.md)
  `CVE-2025-49968` · CVE record: Oganro XML Travel Portal Widget · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49972.md)
  `CVE-2025-49972` · CVE record: David Wood TM Replace Howdy · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress JobWP plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49975.md)
  `CVE-2025-49975` · CVE record: Hossni Mubarak JobWP · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-49977.md)
  `CVE-2025-49977` · CVE record: WP Inventory WP Inventory Manager · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-50036.md)
  `CVE-2025-50036` · CVE record: Yamna Khawaja Mailing Group Listserv · CVSS 6.5 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-50044.md)
  `CVE-2025-50044` · CVE record: Rameez Iqbal Real Estate Manager · CVSS 6.5 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Virtual Moderator plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52772.md)
  `CVE-2025-52772` · CVE record: Adnan Haque (a11n) Virtual Moderator · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Logo Manager For Samandehi plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52780.md)
  `CVE-2025-52780` · CVE record: Mohammad Parsa Logo Manager For Samandehi · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress TinyNav plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52781.md)
  `CVE-2025-52781` · CVE record: Beee TinyNav · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Change Cart button Colors WooCommerce plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52783.md)
  `CVE-2025-52783` · CVE record: themelocation Change Cart button Colors WooCommerce · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52784.md)
  `CVE-2025-52784` · CVE record: hideoguchi Bluff Post · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Lewe ChordPress plugin <= 4.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability](https://agentprime.io/advisories/CVE-2025-52789.md)
  `CVE-2025-52789` · CVE record: George Lewe Lewe ChordPress · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP-DownloadCounter plugin <= 1.01 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52790.md)
  `CVE-2025-52790` · CVE record: r-win WP-DownloadCounter · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Knowledge Base – Knowledge Base Maker plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52791.md)
  `CVE-2025-52791` · CVE record: devfelixmoira Knowledge Base – Knowledge Base Maker · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52792.md)
  `CVE-2025-52792` · CVE record: vgstef WP User Stylesheet Switcher · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Esselink.nu Settings plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-52793.md)
  `CVE-2025-52793` · CVE record: Esselink.nu Esselink.nu Settings · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Creative Contact Form plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52794.md)
  `CVE-2025-52794` · CVE record: Creative-Solutions Creative Contact Form · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-52795.md)
  `CVE-2025-52795` · CVE record: aharonyan WP Front User Submit / Front Editor · CVSS 7.1 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52825.md)
  `CVE-2025-52825` · CVE record: Rameez Iqbal Real Estate Manager · CVSS 8.8 High · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52711.md)
  `CVE-2025-52711` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [code-projects School Fees Payment System cross-site request forgery](https://agentprime.io/advisories/CVE-2025-6341.md)
  `CVE-2025-6341` · CVE record: code-projects School Fees Payment System · CVSS 5.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF), Broken access control

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTA2LTIwVDEyOjMxOjA3LjM4NjAwMFoiLCJDVkUtMjAyNS02MzQxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTA2LTI3VDEzOjIxOjM0LjY1ODAwMFoiLCJDVkUtMjAyNS01MzMxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTA2LTI3VDEzOjIxOjM0LjY1ODAwMFoiLCJDVkUtMjAyNS01MzMxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.