# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-12188.md)
  `CVE-2025-12188` · CVE record: wpmasterscom Posts Navigation Links for Sections and Headings – Free by WP Masters · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: Cross-site request forgery (CSRF)
- [WP Global Screen Options <= 0.2 - Cross-Site Request Forgery to Screen Options Update](https://agentprime.io/advisories/CVE-2025-12069.md)
  `CVE-2025-12069` · CVE record: stiand WP Global Screen Options · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: Cross-site request forgery (CSRF)
- [Label Plugins <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-12401.md)
  `CVE-2025-12401` · CVE record: theode Label Plugins · CVSS 6.1 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: Cross-site request forgery (CSRF)
- [ViaAds <= 2.1.2 - Cross-Site Request Forgery to API Key Update](https://agentprime.io/advisories/CVE-2025-12070.md)
  `CVE-2025-12070` · CVE record: viaads ViaAds · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Bard theme <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64368.md)
  `CVE-2025-64368` · CVE record: Mikado-Themes Bard · CVSS 5.4 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Advanced Database Cleaner plugin <= 3.1.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64357.md)
  `CVE-2025-64357` · CVE record: Younes JFR. Advanced Database Cleaner · CVSS 4.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Depicter <= 4.0.4 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-8383.md)
  `CVE-2025-8383` · CVE record: averta Depicter — Popup & Slider Builder · CVSS 4.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay](https://agentprime.io/advisories/CVE-2023-53688.md)
  `CVE-2023-53688` · CVE record: Nagios XI · CVSS 5.1 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF)
- [Multiple Cross-Site Request Forgery in Quick.Cart](https://agentprime.io/advisories/CVE-2025-10317.md)
  `CVE-2025-10317` · CVE record: OpenSolution Quick.Cart · CVSS 5.1 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Drupal Currency allows Cross Site Request Forgery](https://agentprime.io/advisories/GHSA-27fv-rpgj-4c6m.md)
  `GHSA-27fv-rpgj-4c6m`, `CVE-2025-10930`, `DRUPAL-CONTRIB-2025-110`, `PKSA-d8sh-729j-6w84` · Packagist `drupal/currency`: affected `<3.5.0`, fixed in `3.5.0` · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [CSRF in FluxCP account endpoints allows account takeover / state-changing actions](https://agentprime.io/advisories/CVE-2025-62797.md)
  `CVE-2025-62797` · CVE record: rathena FluxCP · CVSS 8.6 High · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation](https://agentprime.io/advisories/CVE-2025-12479.md)
  `CVE-2025-12479` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check](https://agentprime.io/advisories/GHSA-m244-6mff-p355.md)
  `GHSA-m244-6mff-p355`, `CVE-2025-64149` · Maven `org.jenkins-ci.plugins:publish-to-bitbucket`: affected `<=0.4`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery](https://agentprime.io/advisories/GHSA-x2pv-fph3-phfx.md)
  `GHSA-x2pv-fph3-phfx`, `CVE-2025-64141` · Maven `org.jenkins-ci.plugins:nexus-task-runner`: affected `<=0.9.2`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Jenkins Themis Plugin vulnerable to cross-site request forgery](https://agentprime.io/advisories/GHSA-93mh-mx9w-m69q.md)
  `GHSA-93mh-mx9w-m69q`, `CVE-2025-64136` · Maven `org.jenkins-ci.plugins:themis`: affected `<=1.4.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery](https://agentprime.io/advisories/GHSA-6mgr-3374-4p3c.md)
  `GHSA-6mgr-3374-4p3c`, `CVE-2025-64138` · Maven `org.jenkins-ci.plugins:windocks-start-container`: affected `<=1.4`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Jenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery](https://agentprime.io/advisories/GHSA-3jw2-5hjg-hc2c.md)
  `GHSA-3jw2-5hjg-hc2c`, `CVE-2025-64133` · Maven `jp.ikedam.jenkins.plugins:extensible-choice-parameter`: affected `<=239.v5f5c278708cf`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64290.md)
  `CVE-2025-64290` · CVE record: Premmerce Premmerce Product Search for WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64288.md)
  `CVE-2025-64288` · CVE record: Premmerce Premmerce · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Rentals theme <= 3.13.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64286.md)
  `CVE-2025-64286` · CVE record: WpEstate WP Rentals · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64226.md)
  `CVE-2025-64226` · CVE record: colabrio Stockie Extra · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64201.md)
  `CVE-2025-64201` · CVE record: blubrry PowerPress Podcasting · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress hpb seo plugin for WordPress plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60075.md)
  `CVE-2025-60075` · CVE record: Allegro Marketing hpb seo plugin for WordPress · CVSS 7.1 High · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58939.md)
  `CVE-2025-58939` · CVE record: highwarden Super Store Finder · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-57931.md)
  `CVE-2025-57931` · CVE record: Ays Pro Popup box · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507.](https://agentprime.io/advisories/CVE-2024-45161.md)
  `CVE-2024-45161` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Extension - jdownloads.com - CSRF vectors in jDownloads component 1.0.0 - 4.0.47 for Joomla](https://agentprime.io/advisories/CVE-2025-55758.md)
  `CVE-2025-55758` · CVE record: jdownloads.com JDownloads component for Joomla · CVSS 5.4 Medium · Not analysed yet · Published 28 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Liferay Portal Vulnerable to CSRF in Headless APIs](https://agentprime.io/advisories/GHSA-gh4w-8qgq-8w9r.md)
  `GHSA-gh4w-8qgq-8w9r`, `CVE-2025-62258` · Maven `com.liferay.portal:release.portal.bom`: affected `>=7.4.0-ga1, <7.4.3.108`, fixed in `7.4.3.108` · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Wimi Teamwork < v7.38.17 CSRF](https://agentprime.io/advisories/CVE-2025-34133.md)
  `CVE-2025-34133` · CVE record: Cloud Solutions SAS Wimi Teamwork · CVSS 7.0 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Entrada theme <= 5.7.7 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58918.md)
  `CVE-2025-58918` · CVE record: Waituk Entrada · CVSS 4.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress FanBridge signup plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62986.md)
  `CVE-2025-62986` · CVE record: FanBridge FanBridge signup · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Raychat plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62975.md)
  `CVE-2025-62975` · CVE record: raychat Raychat · CVSS 4.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress CloudSearch plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62962.md)
  `CVE-2025-62962` · CVE record: Andrea Landonio CloudSearch · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62958.md)
  `CVE-2025-62958` · CVE record: Clifton Griffin Simple Content Templates for Blog Posts & Pages · CVSS 4.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62957.md)
  `CVE-2025-62957` · CVE record: NikanWP NikanWP WooCommerce Reporting · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Reloadly plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62956.md)
  `CVE-2025-62956` · CVE record: iseremet Reloadly · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Did Prestashop Display plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62945.md)
  `CVE-2025-62945` · CVE record: Eduard Pinuaga Linares Did Prestashop Display · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Business Hours plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62934.md)
  `CVE-2025-62934` · CVE record: Mejar WP Business Hours · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Awesome Testimonials plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62933.md)
  `CVE-2025-62933` · CVE record: Prakash Awesome Testimonials · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Multilang Contact Form plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62896.md)
  `CVE-2025-62896` · CVE record: digitaldonkey Multilang Contact Form · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62891.md)
  `CVE-2025-62891` · CVE record: Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) · CVSS 4.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62890.md)
  `CVE-2025-62890` · CVE record: Premmerce Premmerce Brands for WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62886.md)
  `CVE-2025-62886` · CVE record: wpdevart Pricing Table builder · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [ajayrandhawa User-Management-PHP-MYSQL web cross-site request forgery](https://agentprime.io/advisories/CVE-2025-12202.md)
  `CVE-2025-12202` · CVE record: ajayrandhawa User-Management-PHP-MYSQL web · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [An issue was discovered in BAE SOCET GXP before 4.6.0.2.](https://agentprime.io/advisories/CVE-2025-54969.md)
  `CVE-2025-54969` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Cross-Site Request Forgery to Sync Rule Creation](https://agentprime.io/advisories/CVE-2025-11976.md)
  `CVE-2025-11976` · CVE record: fusewp FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) · CVSS 4.3 Medium · Not analysed yet · Published 25 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Simple Registration for WooCommerce <= 1.5.8 - Cross-Site Request Forgery to Privilege Escalation via Role Request Approval](https://agentprime.io/advisories/CVE-2025-12095.md)
  `CVE-2025-12095` · CVE record: astoundify Simple Registration for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 25 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens](https://agentprime.io/advisories/CVE-2025-12028.md)
  `CVE-2025-12028` · CVE record: indieweb IndieAuth · CVSS 8.8 High · Not analysed yet · Published 24 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Disable Content Editor For Specific Template <= 2.0 - Cross-Site Request Forgery to Template Configuration Update](https://agentprime.io/advisories/CVE-2025-12072.md)
  `CVE-2025-12072` · CVE record: mynamevenu24 Disable Content Editor For Specific Template · CVSS 4.3 Medium · Not analysed yet · Published 24 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing…](https://agentprime.io/advisories/CVE-2025-56009.md)
  `CVE-2025-56009` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62061.md)
  `CVE-2025-62061` · CVE record: impleCode Product Catalog Simple · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62009.md)
  `CVE-2025-62009` · CVE record: Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62005.md)
  `CVE-2025-62005` · CVE record: FantasticPlugins SUMO Memberships for WooCommerce · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Advanced Custom Fields : CPT Options Pages plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-60208.md)
  `CVE-2025-60208` · CVE record: Tusko Trush Advanced Custom Fields : CPT Options Pages · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60168.md)
  `CVE-2025-60168` · CVE record: integrationshotelrunner HotelRunner Booking Widget · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Media Categories Plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60134.md)
  `CVE-2025-60134` · CVE record: John James Jacoby WP Media Categories · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Video Blogster Lite Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60132.md)
  `CVE-2025-60132` · CVE record: johnh10 Video Blogster Lite · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Evergreen Content Poster plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-49373.md)
  `CVE-2025-49373` · CVE record: Evergreen Content Poster Evergreen Content Poster · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Search & Filter plugin <= 1.2.17 - Cross Site Request Forgery (CSRF) to Open Redirect vulnerability](https://agentprime.io/advisories/CVE-2025-48099.md)
  `CVE-2025-48099` · CVE record: Code Amp Search & Filter · CVSS 4.7 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)
- [PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification](https://agentprime.io/advisories/CVE-2025-10588.md)
  `CVE-2025-10588` · CVE record: pixelyoursite PixelYourSite – Your smart PIXEL (TAG) & API Manager · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTEwLTIyVDA2OjQwOjU3Ljk3NDAwMFoiLCJDVkUtMjAyNS0xMDU4OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTExLTA0VDA0OjI3OjEyLjkzMDAwMFoiLCJDVkUtMjAyNS0xMjQxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTExLTA0VDA0OjI3OjEyLjkzMDAwMFoiLCJDVkUtMjAyNS0xMjQxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.