# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress ShrinkTheWeb (STW) Website Previews Plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58677.md)
  `CVE-2025-58677` · CVE record: puravida1976 ShrinkTheWeb (STW) Website Previews · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Current Age Plugin Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58687.md)
  `CVE-2025-58687` · CVE record: WP CMS Ninja Current Age Plugin · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Casengo Live Chat Support Plugin <= 2.1.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58688.md)
  `CVE-2025-58688` · CVE record: Casengo Casengo Live Chat Support · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Doliconnect Plugin <= 9.5.7 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58690.md)
  `CVE-2025-58690` · CVE record: ptibogxiv Doliconnect · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Custom Login And Signup Widget <= 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9887.md)
  `CVE-2025-9887` · CVE record: bittokazi Custom Login And Signup Widget · CVSS 4.3 Medium · Not analysed yet · Published 20 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9883.md)
  `CVE-2025-9883` · CVE record: bpedrassani Browser Sniff · CVSS 6.1 Medium · Not analysed yet · Published 20 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9882.md)
  `CVE-2025-9882` · CVE record: michaelbo osTicket WP Bridge · CVSS 6.1 Medium · Not analysed yet · Published 20 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Internal Links Manager <= 3.0.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9949.md)
  `CVE-2025-9949` · CVE record: webraketen Internal Links Manager · CVSS 4.3 Medium · Not analysed yet · Published 20 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/GHSA-697h-3q6m-jwp4.md)
  `GHSA-697h-3q6m-jwp4`, `CVE-2025-43809` · Maven `com.liferay.portal:com.liferay.portal.impl`: affected `<101.0.0`, fixed in `101.0.0` · CVSS 5.1 Medium · Not analysed yet · Published 19 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request.](https://agentprime.io/advisories/CVE-2025-50255.md)
  `CVE-2025-50255` · CVE record · CVSS 7.8 High · Not analysed yet · Published 18 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Cross-Site Request Forgery to Arbitrary Directory Deletion in /wp-content](https://agentprime.io/advisories/CVE-2025-10188.md)
  `CVE-2025-10188` · CVE record: tvcnet The Hack Repair Guy's Plugin Archiver · CVSS 5.4 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation](https://agentprime.io/advisories/CVE-2025-9891.md)
  `CVE-2025-9891` · CVE record: cyberlord92 User Sync · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [USS Upyun <= 1.5.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9629.md)
  `CVE-2025-9629` · CVE record: shenyanzhi USS Upyun · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration (ZCS) when the zimbraFeatureResetPasswordStatus attribute is enabled.](https://agentprime.io/advisories/CVE-2025-54390.md)
  `CVE-2025-54390` · CVE record · CVSS 6.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0.](https://agentprime.io/advisories/CVE-2025-56710.md)
  `CVE-2025-56710` · CVE record · CVSS 7.3 High · Not analysed yet · Published 15 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Ultimate Blogroll <= 2.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9881.md)
  `CVE-2025-9881` · CVE record: jensg Ultimate Blogroll · CVSS 6.1 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Side Slide Responsive Menu <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9880.md)
  `CVE-2025-9880` · CVE record: dejocar Side Slide Responsive Menu · CVSS 6.1 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [LH Signing <= 2.83 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9633.md)
  `CVE-2025-9633` · CVE record: shawfactor LH Signing · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [PhpList Subber <= 1.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9632.md)
  `CVE-2025-9632` · CVE record: vinzzb PhpList Subber · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Publish approval <= 1.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9617.md)
  `CVE-2025-9617` · CVE record: evidentlycube Publish approval · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Seo Monster <= 3.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9620.md)
  `CVE-2025-9620` · CVE record: edsteep Seo Monster · CVSS 6.1 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-8481.md)
  `CVE-2025-8481` · CVE record: mdimran41 Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Admin in English with Switch <= 1.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9623.md)
  `CVE-2025-9623` · CVE record: dontcare Admin in English with Switch · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Run Log <= 1.7.10 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-9627.md)
  `CVE-2025-9627` · CVE record: izem Run Log · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Analytics Reduce Bounce Rate <= 2.3 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9635.md)
  `CVE-2025-9635` · CVE record: ishan001 Analytics Reduce Bounce Rate · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Plugin updates blocker <= 0.2 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9634.md)
  `CVE-2025-9634` · CVE record: jegerwan Plugin updates blocker · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [The integration of the AMO.CRM <= 1.0.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9628.md)
  `CVE-2025-9628` · CVE record: jh5ru The integration of the AMO.CRM · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [AutoCatSet <= 2.1.4 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9631.md)
  `CVE-2025-9631` · CVE record: gyaku AutoCatSet · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Zoho Flow <= 2.14.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-8479.md)
  `CVE-2025-8479` · CVE record: zohoflow Zoho Flow – Integrate 100+ plugins with 1000+ business apps, no-code workflow automation · CVSS 4.3 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Maspik <= 2.5.6 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9888.md)
  `CVE-2025-9888` · CVE record: yonifre Maspik – Ultimate Spam Protection · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WP Blast | SEO & Performance Booster <= 1.8.6 - Cross-Site Request Forgery to Cache Clearing](https://agentprime.io/advisories/CVE-2025-9622.md)
  `CVE-2025-9622` · CVE record: wpblast WP Blast | SEO & Performance Booster · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover](https://agentprime.io/advisories/GHSA-rf24-wg77-gq7w.md)
  `GHSA-rf24-wg77-gq7w`, `CVE-2025-58430`, `GO-2025-3943` · Go `github.com/knadh/listmonk`: affected `<=1.1.0`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF)
- [Dreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352)](https://agentprime.io/advisories/CVE-2025-54256.md)
  `CVE-2025-54256` · CVE record: Adobe Dreamweaver Desktop · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Advanced Settings Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58975.md)
  `CVE-2025-58975` · CVE record: Helmut Wandl Advanced Settings · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WooCommerce Booking Bundle Hours Plugin <= 0.7.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58991.md)
  `CVE-2025-58991` · CVE record: Cristiano Zanca WooCommerce Booking Bundle Hours · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58997.md)
  `CVE-2025-58997` · CVE record: Frenify Mow · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Ivanti Connect Secure and others](https://agentprime.io/advisories/CVE-2025-55147.md)
  `CVE-2025-55147` · CVE record: Ivanti Connect Secure and 3 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Ivanti Connect Secure and others](https://agentprime.io/advisories/CVE-2025-8711.md)
  `CVE-2025-8711` · CVE record: Ivanti Connect Secure and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)](https://agentprime.io/advisories/CVE-2025-42923.md)
  `CVE-2025-42923` · CVE record: SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop](https://agentprime.io/advisories/CVE-2024-48341.md)
  `CVE-2024-48341` · CVE record · CVSS 3.7 Low · Not analysed yet · Published 8 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-27003.md)
  `CVE-2025-27003` · CVE record: fullworks Quick Paypal Payments · CVSS 4.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Floating Window Music Player plugin <= 3.4.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability](https://agentprime.io/advisories/CVE-2025-48104.md)
  `CVE-2025-48104` · CVE record: ericzane Floating Window Music Player · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Woocommerce Gifts Product Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58878.md)
  `CVE-2025-58878` · CVE record: usamafarooq Woocommerce Gifts Product · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58869.md)
  `CVE-2025-58869` · CVE record: Simasicher SimaCookie · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58865.md)
  `CVE-2025-58865` · CVE record: reimund Compact Admin · CVSS 4.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Quick Event Calendar Plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58861.md)
  `CVE-2025-58861` · CVE record: WP Corner Quick Event Calendar · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58860.md)
  `CVE-2025-58860` · CVE record: KaizenCoders Enable Latex · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Add to Feedly Plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58859.md)
  `CVE-2025-58859` · CVE record: David Merinas Add to Feedly · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Woocommerce Notify Updated Product Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58856.md)
  `CVE-2025-58856` · CVE record: ablancodev Woocommerce Notify Updated Product · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58854.md)
  `CVE-2025-58854` · CVE record: Samer Bechara Ultimate AJAX Login · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58853.md)
  `CVE-2025-58853` · CVE record: OTWthemes Popping Sidebars and Widgets Light · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58852.md)
  `CVE-2025-58852` · CVE record: Mark O'Donnell MSTW League Manager · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58849.md)
  `CVE-2025-58849` · CVE record: Deepak S Hide Real Download Path · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP likes Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58848.md)
  `CVE-2025-58848` · CVE record: aakash1911 WP likes · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WN Flipbox Pro Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58847.md)
  `CVE-2025-58847` · CVE record: Yaidier WN Flipbox Pro · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Plugin <= 2020.1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58846.md)
  `CVE-2025-58846` · CVE record: Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58845.md)
  `CVE-2025-58845` · CVE record: ChrisHurst Bulk Watermark · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Database to Excel Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58844.md)
  `CVE-2025-58844` · CVE record: Subhash Kumar Database to Excel · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Auto Last Youtube Video Plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58843.md)
  `CVE-2025-58843` · CVE record: David Merinas Auto Last Youtube Video · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Invelity MyGLS connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58833.md)
  `CVE-2025-58833` · CVE record: INVELITY Invelity MyGLS connect · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTA5LTA1VDEzOjQ1OjI1LjU3NDAwMFoiLCJDVkUtMjAyNS01ODgzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTA5LTIyVDE4OjIyOjUxLjI0MjAwMFoiLCJDVkUtMjAyNS01ODY3NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTA5LTIyVDE4OjIyOjUxLjI0MjAwMFoiLCJDVkUtMjAyNS01ODY3NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.