# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress W3SCloud Contact Form 7 to Zoho CRM plugin <= 3.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60169.md)
  `CVE-2025-60169` · CVE record: W3S Cloud Technology W3SCloud Contact Form 7 to Zoho CRM · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress NewsmanApp plugin <= 2.7.7 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60164.md)
  `CVE-2025-60164` · CVE record: NewsMAN NewsmanApp · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60156.md)
  `CVE-2025-60156` · CVE record: webandprint AR For WordPress · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60145.md)
  `CVE-2025-60145` · CVE record: yonifre Lenix scss compiler · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Sendle Shipping plugin <= 6.02 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60139.md)
  `CVE-2025-60139` · CVE record: Joovii Sendle Shipping · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60137.md)
  `CVE-2025-60137` · CVE record: Galaxy Weblinks Post Featured Video · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60117.md)
  `CVE-2025-60117` · CVE record: TangibleWP Vehica Core · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Instapage plugin plugin <= 3.7.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60115.md)
  `CVE-2025-60115` · CVE record: instapagedev Instapage Plugin · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Groovy Menu Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60113.md)
  `CVE-2025-60113` · CVE record: grooni Groovy Menu · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60111.md)
  `CVE-2025-60111` · CVE record: javothemes Javo Core · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Download Manager Plugin <= 3.3.24 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60093.md)
  `CVE-2025-60093` · CVE record: Shahjada Download Manager · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Di Themes Demo Site Importer plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Plugin Activation vulnerability](https://agentprime.io/advisories/CVE-2025-58914.md)
  `CVE-2025-58914` · CVE record: Di Themes Di Themes Demo Site Importer · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [System Dashboard <= 2.8.20 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10377.md)
  `CVE-2025-10377` · CVE record: qriouslad System Dashboard · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10752.md)
  `CVE-2025-10752` · CVE record: cyberlord92 OAuth Single Sign On – SSO (OAuth Client) · CVSS 4.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [In Shenzhen C-Data Technology Co.](https://agentprime.io/advisories/CVE-2025-56311.md)
  `CVE-2025-56311` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58956.md)
  `CVE-2025-58956` · CVE record: loopus WP Attractive Donations System · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Zoho Flow Plugin <= 2.14.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-59568.md)
  `CVE-2025-59568` · CVE record: Zoho Flow Zoho Flow · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-59572.md)
  `CVE-2025-59572` · CVE record: purethemes WorkScout-Core · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Mihdan: No External Links Plugin <= 5.1.6.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53451.md)
  `CVE-2025-53451` · CVE record: mihdan Mihdan: No External Links · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress SEO Backlink Monitor plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53456.md)
  `CVE-2025-53456` · CVE record: activewebsight SEO Backlink Monitor · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress RIS Version Switcher – Downgrade or Upgrade WP Versions Easily Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57902.md)
  `CVE-2025-57902` · CVE record: Md Taufiqur Rahman RIS Version Switcher – Downgrade or Upgrade WP Versions Easily · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress AgreeMe Checkboxes For WooCommerce Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57905.md)
  `CVE-2025-57905` · CVE record: Amin Y AgreeMe Checkboxes For WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Deliver via Shipos for WooCommerce plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57914.md)
  `CVE-2025-57914` · CVE record: Matat Technologies Deliver via Shipos for WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress TOCHAT.BE Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57915.md)
  `CVE-2025-57915` · CVE record: César Martín TOCHAT.BE · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57918.md)
  `CVE-2025-57918` · CVE record: ERA404 LinkedInclude · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Developer Plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57924.md)
  `CVE-2025-57924` · CVE record: Automattic Developer · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Dashboard Notepad Plugin <= 1.42 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57927.md)
  `CVE-2025-57927` · CVE record: Stephanie Leary Dashboard Notepad · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57930.md)
  `CVE-2025-57930` · CVE record: kanwei_doublethedonation Double the Donation · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Piotnet Forms Plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57933.md)
  `CVE-2025-57933` · CVE record: piotnetdotcom Piotnet Forms · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress LWS Affiliation Plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57934.md)
  `CVE-2025-57934` · CVE record: Aurélien LWS LWS Affiliation · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57942.md)
  `CVE-2025-57942` · CVE record: andy_moyle Emergency Password Reset · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress payOS plugin <= 1.0.73 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57946.md)
  `CVE-2025-57946` · CVE record: Loc Bui payOS · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Travel Map Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57960.md)
  `CVE-2025-57960` · CVE record: TravelMap Travel Map · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress SALESmanago Plugin <= 3.8.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57970.md)
  `CVE-2025-57970` · CVE record: SALESmanago SALESmanago & Leadoo · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57977.md)
  `CVE-2025-57977` · CVE record: wpdesk Flexible PDF Invoices for WooCommerce & WordPress · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Advanced Appointment Booking & Scheduling plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57978.md)
  `CVE-2025-57978` · CVE record: themespride Advanced Appointment Booking & Scheduling · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress BP Disable Activation Reloaded Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-57983.md)
  `CVE-2025-57983` · CVE record: Damian BP Disable Activation Reloaded · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Mail Baby SMTP plugin <= 2.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57992.md)
  `CVE-2025-57992` · CVE record: InterServer Mail Baby SMTP · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress SV Proven Expert Plugin <= 2.0.06 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58010.md)
  `CVE-2025-58010` · CVE record: straightvisions GmbH SV Proven Expert · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress CouponXxL Theme <= 4.5.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58013.md)
  `CVE-2025-58013` · CVE record: pebas CouponXxL · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58014.md)
  `CVE-2025-58014` · CVE record: Ays Pro Quiz Maker · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Compiler Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58032.md)
  `CVE-2025-58032` · CVE record: Bytes.co WP Compiler · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58199.md)
  `CVE-2025-58199` · CVE record: Fastly Fastly · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58200.md)
  `CVE-2025-58200` · CVE record: Bage Flexible FAQ · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Show Pages List Plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58219.md)
  `CVE-2025-58219` · CVE record: LIJE Show Pages List · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Printeers Print & Ship Plugin <= 1.17.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58224.md)
  `CVE-2025-58224` · CVE record: Printeers Printeers Print & Ship · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Force Update Translations plugin <= 0.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58236.md)
  `CVE-2025-58236` · CVE record: Mayo Moriyama Force Update Translations · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Constructo Theme <= 4.3.9 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58244.md)
  `CVE-2025-58244` · CVE record: Anps Constructo · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Findgo Theme <= 1.3.55 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58250.md)
  `CVE-2025-58250` · CVE record: ApusTheme Findgo · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Custom Post Type Images Plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58255.md)
  `CVE-2025-58255` · CVE record: yonisink Custom Post Type Images · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58259.md)
  `CVE-2025-58259` · CVE record: scriptsbundle Nokri · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Mavis HTTPS to HTTP Redirection Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58261.md)
  `CVE-2025-58261` · CVE record: PressPage Entertainment Inc Mavis HTTPS to HTTP Redirection · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58262.md)
  `CVE-2025-58262` · CVE record: WPDirectoryKit Sweet Energy Efficiency · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58267.md)
  `CVE-2025-58267` · CVE record: Aftabul Islam Stock Message · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WPMK PDF Generator Plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58268.md)
  `CVE-2025-58268` · CVE record: WPMK WPMK PDF Generator · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58270.md)
  `CVE-2025-58270` · CVE record: NIX Solutions Ltd NIX Anti-Spam Light · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Grid plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58657.md)
  `CVE-2025-58657` · CVE record: EdwardBock Grid · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Content Protection Plugin <= 1.3 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58670.md)
  `CVE-2025-58670` · CVE record: Shankaranand Maurya WP Content Protection · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Interact: Embed A Quiz On Your Site Plugin <= 3.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58675.md)
  `CVE-2025-58675` · CVE record: tryinteract Interact: Embed A Quiz On Your Site · CVSS 4.3 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress HORIZONTAL SLIDER Plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58676.md)
  `CVE-2025-58676` · CVE record: extendyourweb HORIZONTAL SLIDER · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTA5LTIyVDE4OjIyOjUxLjI0MjAwMFoiLCJDVkUtMjAyNS01ODY3NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTA5LTI2VDA4OjMyOjA2LjAyOTAwMFoiLCJDVkUtMjAyNS02MDE3MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTA5LTI2VDA4OjMyOjA2LjAyOTAwMFoiLCJDVkUtMjAyNS02MDE3MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.