# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Cross-site request forgery in Mercku M6a](https://agentprime.io/advisories/CVE-2025-62771.md)
  `CVE-2025-62771` · CVE record: Mercku M6a · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system](https://agentprime.io/advisories/GHSA-gjp8-99fv-cgcw.md)
  `GHSA-gjp8-99fv-cgcw`, `CVE-2025-47410` · Maven `org.apache.geode:geode-web`: affected `>=1.10.0, <1.15.2`, fixed in `1.15.2` · CVSS 8.8 High · Not analysed yet · Published 18 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution](https://agentprime.io/advisories/CVE-2025-9890.md)
  `CVE-2025-9890` · CVE record: mndpsingh287 Theme Editor · CVSS 8.8 High · Not analysed yet · Published 18 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages](https://agentprime.io/advisories/GHSA-7fch-4f2f-jcgm.md)
  `GHSA-7fch-4f2f-jcgm`, `CVE-2025-41254` · Maven `org.springframework:spring-websocket`: affected `>=6.2.0, <6.2.12 || >=6.1.0, <=6.1.21 || >=6.0.0, <=6.0.23 || <=5.3.39`, fixed in `6.2.12` · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-10700.md)
  `CVE-2025-10700` · CVE record: elemntor Ally – Web Accessibility & Usability · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Theme Importer <= 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10312.md)
  `CVE-2025-10312` · CVE record: steve-forster Theme Importer · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-10300.md)
  `CVE-2025-10300` · CVE record: fmeaddons TopBar · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [FunKItools <= 1.0.2 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-10301.md)
  `CVE-2025-10301` · CVE record: flenskiproject FunKItools · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [EspoCRM allows arbitrary user creation via stored SVG injection and CSRF](https://agentprime.io/advisories/CVE-2025-59428.md)
  `CVE-2025-59428` · CVE record: espocrm espocrm · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2025-7330.md)
  `CVE-2025-7330` · CVE record: Rockwell Automation Comms - 1783-NATR · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP](https://agentprime.io/advisories/CVE-2025-42908.md)
  `CVE-2025-42908` · CVE record: SAP_SE SAP NetWeaver Application Server for ABAP · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.](https://agentprime.io/advisories/CVE-2025-60535.md)
  `CVE-2025-60535` · CVE record · CVSS 7.3 High · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10376.md)
  `CVE-2025-10376` · CVE record: ercbs Course Redirects for Learndash Plugin · CVSS 4.3 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Web Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10375.md)
  `CVE-2025-10375` · CVE record: accessibewp Web Accessibility by accessiBe · CVSS 4.3 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation](https://agentprime.io/advisories/CVE-2025-8606.md)
  `CVE-2025-8606` · CVE record: westerndeal GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time · CVSS 2.4 Low · Not analysed yet · Published 11 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Page Blocks <= 1.1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9626.md)
  `CVE-2025-9626` · CVE record: softwud Page Blocks · CVSS 4.3 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9621.md)
  `CVE-2025-9621` · CVE record: widgetpack WidgetPack Comment System · CVSS 4.3 Medium · Not analysed yet · Published 11 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Liferay Portal is vulnerable to CSRF through publication comments](https://agentprime.io/advisories/GHSA-9676-rh83-cr86.md)
  `GHSA-9676-rh83-cr86`, `CVE-2025-62245` · Maven `com.liferay:com.liferay.change.tracking.web`: affected `>=2.0.9, <2.0.121`, fixed in `2.0.121` · CVSS 5.1 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Emlog Pro has CSRF issue that Enables Admin Password Reset](https://agentprime.io/advisories/CVE-2025-61930.md)
  `CVE-2025-61930` · CVE record: emlog emlog · CVSS 8.1 High · Not analysed yet · Published 10 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Apple macOS](https://agentprime.io/advisories/CVE-2025-43296.md)
  `CVE-2025-43296` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site request forgery (CSRF), CWE-693, CWE-703
- [WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-11166.md)
  `CVE-2025-11166` · CVE record: wpgmaps WP Go Maps (formerly WP Google Maps) · CVSS 5.4 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [JhumanJ OpnForm API Endpoint cross-site request forgery](https://agentprime.io/advisories/CVE-2025-11442.md)
  `CVE-2025-11442` · CVE record: JhumanJ OpnForm · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of se…](https://agentprime.io/advisories/CVE-2025-60956.md)
  `CVE-2025-60956` · CVE record · CVSS 8.0 High · Not analysed yet · Published 6 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Trinity Audio <= 5.20.2 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9886.md)
  `CVE-2025-9886` · CVE record: sergiotrinity Trinity Audio – Text to Speech AI audio player to convert content into audio · CVSS 4.3 Medium · Not analysed yet · Published 4 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Ultimate Viral Quiz <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-10302.md)
  `CVE-2025-10302` · CVE record: hameha Ultimate Viral Quiz · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [AP Background <= 3.8.2 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9897.md)
  `CVE-2025-9897` · CVE record: hovanesvn AP Background · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Notification Bar <= 2.2 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9895.md)
  `CVE-2025-9895` · CVE record: umarbajwa Notification Bar · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WP SinoType <= 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9630.md)
  `CVE-2025-9630` · CVE record: samueljesse WP SinoType · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9889.md)
  `CVE-2025-9889` · CVE record: contentmx ContentMX Content Publisher · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Customify <= 0.4.11 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-8669.md)
  `CVE-2025-8669` · CVE record: pressmaximum Customify · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-9892.md)
  `CVE-2025-9892` · CVE record: devrix Restrict User Registration · CVSS 5.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [PayPal Forms <= 1.0.3 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-10309.md)
  `CVE-2025-10309` · CVE record: bsmye PayPal Forms · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Optimize More! – CSS <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset](https://agentprime.io/advisories/CVE-2025-9945.md)
  `CVE-2025-9945` · CVE record: aryadhiratara Optimize More! – CSS · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Mobile Site Redirect <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9884.md)
  `CVE-2025-9884` · CVE record: webdevabq Mobile Site Redirect · CVSS 6.1 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [MPWizard – Create Mercado Pago Payment Links <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion](https://agentprime.io/advisories/CVE-2025-9885.md)
  `CVE-2025-9885` · CVE record: laudanumsoft MPWizard – Create Mercado Pago Payment Links · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Comment Info Detector <= 1.0.5 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-10311.md)
  `CVE-2025-10311` · CVE record: tom_riddle Comment Info Detector · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover](https://agentprime.io/advisories/CVE-2025-9213.md)
  `CVE-2025-9213` · CVE record: textbuilder TextBuilder · CVSS 8.8 High · Not analysed yet · Published 3 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI](https://agentprime.io/advisories/GHSA-p8hw-rfjg-689h.md)
  `GHSA-p8hw-rfjg-689h`, `CVE-2025-54286`, `GO-2025-4003` · Go `github.com/canonical/lxd`: affected `>=0.0.0-20220401034332-1e1349e3cbf3, <0.0.0-20250827065555-0494f5d47e41 || >=5.0, <5.0.5 || >=5.1, <5.21.4 || >=6.0, <6.5`, fixed in `0.0.0-20250827065555-0494f5d47e41`, `5.0.5`, `5.21.4`, `6.5` · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in \`control.php\` Endpoint](https://agentprime.io/advisories/CVE-2025-61604.md)
  `CVE-2025-61604` · CVE record: LabRedesCefetRJ WeGIA · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery in PAD CMS](https://agentprime.io/advisories/CVE-2025-8119.md)
  `CVE-2025-8119` · CVE record: Polska Akademia Dostępności PAD CMS · CVSS 5.1 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function](https://agentprime.io/advisories/CVE-2025-7052.md)
  `CVE-2025-7052` · CVE record: latepoint LatePoint – Calendar Booking Plugin for Appointments and Events · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [LockerPress – WordPress Security Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-9946.md)
  `CVE-2025-9946` · CVE record: lockerpress LockerPress – WordPress Security Plugin · CVSS 6.1 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Chat by Chatwee <= 2.1.3 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-9948.md)
  `CVE-2025-9948` · CVE record: paulq Chat by Chatwee · CVSS 4.3 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Medical Informatics Engineering Enterprise Health cross site request forgery](https://agentprime.io/advisories/CVE-2025-35030.md)
  `CVE-2025-35030` · CVE record: Medical Informatics Engineering Enterprise Health · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [VM Menu Reorder plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-9893.md)
  `CVE-2025-9893` · CVE record: milankyada VM Menu Reorder plugin · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending](https://agentprime.io/advisories/CVE-2025-9944.md)
  `CVE-2025-9944` · CVE record: kelderic Professional Contact Form · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9898.md)
  `CVE-2025-9898` · CVE record: compojoom cForms – Light speed fast Form Builder · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9899.md)
  `CVE-2025-9899` · CVE record: trustreviews Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms · CVSS 6.1 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger](https://agentprime.io/advisories/CVE-2025-9894.md)
  `CVE-2025-9894` · CVE record: cristianr909090 Sync Feedly · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [HidePost <= 2.3.8 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-9896.md)
  `CVE-2025-9896` · CVE record: funnnny HidePost · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [SourceCodester Pet Grooming Management Software cross-site request forgery](https://agentprime.io/advisories/CVE-2025-11051.md)
  `CVE-2025-11051` · CVE record: SourceCodester Pet Grooming Management Software · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion](https://agentprime.io/advisories/CVE-2025-10498.md)
  `CVE-2025-10498` · CVE record: kstover Ninja Forms – The Contact Form Builder That Grows With You · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-10499.md)
  `CVE-2025-10499` · CVE record: kstover Ninja Forms – The Contact Form Builder That Grows With You · CVSS 4.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [IBM Storage TS4500 Library cross-site request forgery](https://agentprime.io/advisories/CVE-2024-43192.md)
  `CVE-2024-43192` · CVE record: IBM Storage TS4500 Library · CVSS 6.5 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [givanz Vvveb cross-site request forgery](https://agentprime.io/advisories/CVE-2025-11029.md)
  `CVE-2025-11029` · CVE record: givanz Vvveb · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass](https://agentprime.io/advisories/GHSA-w87v-7w53-wwxv.md)
  `GHSA-w87v-7w53-wwxv`, `CVE-2025-59845` · npm `@apollo/explorer` and 1 more: affected `<3.7.3`, fixed in `3.7.3` · CVSS 8.2 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF), CWE-346
- [WordPress GST for WooCommerce Plugin <= 2.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60173.md)
  `CVE-2025-60173` · CVE record: Ashwani kumar GST for WooCommerce · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Flytedesk Digital Plugin <= 20181101 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60172.md)
  `CVE-2025-60172` · CVE record: flytedesk Flytedesk Digital · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Conditional Cart Messages for WooCommerce – YourPlugins.com Plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60171.md)
  `CVE-2025-60171` · CVE record: yourplugins Conditional Cart Messages for WooCommerce – YourPlugins.com · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress HTACCESS IP Blocker Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60170.md)
  `CVE-2025-60170` · CVE record: Taraprasad Swain HTACCESS IP Blocker · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2025 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTA5LTI2VDA4OjMyOjA2LjAyOTAwMFoiLCJDVkUtMjAyNS02MDE3MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTEwLTIyVDA2OjQwOjU3Ljk3NDAwMFoiLCJDVkUtMjAyNS0xMDU4OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTEwLTIyVDA2OjQwOjU3Ljk3NDAwMFoiLCJDVkUtMjAyNS0xMDU4OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.