# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2022-50804.md)
  `CVE-2022-50804` · CVE record: JM-DATA ONU JF511-TV · CVSS 5.1 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WING WordPress Migrator plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-52835.md)
  `CVE-2025-52835` · CVE record: ConoHa by GMO WING WordPress Migrator · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62112.md)
  `CVE-2025-62112` · CVE record: Merv Barrett Import into Easy Property Listings · CVSS 4.3 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-69021.md)
  `CVE-2025-69021` · CVE record: Ays Pro Popup box · CVSS 5.4 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68998.md)
  `CVE-2025-68998` · CVE record: Heateor Support Heateor Social Login · CVSS 5.4 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls](https://agentprime.io/advisories/GHSA-gmx5-frv9-9m9f.md)
  `GHSA-gmx5-frv9-9m9f`, `CVE-2025-62190`, `GO-2025-4254` · Go `github.com/mattermost/mattermost-plugin-calls`: affected `<1.10.0`, fixed in `1.10.0` · CVSS 4.3 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php.](https://agentprime.io/advisories/CVE-2024-30855.md)
  `CVE-2024-30855` · CVE record · CVSS 8.8 High · Not analysed yet · Published 29 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origi…](https://agentprime.io/advisories/CVE-2025-67013.md)
  `CVE-2025-67013` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 26 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [KYOCERA Net Admin 3.4.0906 Cross-Site Request Forgery via User Administration](https://agentprime.io/advisories/CVE-2019-25254.md)
  `CVE-2019-25254` · CVE record: KYOCERA Corporation KYOCERA Net Admin · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change](https://agentprime.io/advisories/CVE-2019-25252.md)
  `CVE-2019-25252` · CVE record: Teradek VidiU Pro · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2019-25250.md)
  `CVE-2019-25250` · CVE record: devolo AG dLAN 550 duo+ Starter Kit · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Beward N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Vulnerability](https://agentprime.io/advisories/CVE-2019-25247.md)
  `CVE-2019-25247` · CVE record: Beward R&D Co., Ltd N100 H.264 VGA IP Camera · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface](https://agentprime.io/advisories/CVE-2019-25242.md)
  `CVE-2019-25242` · CVE record: iWT Ltd. FaceSentry Access Control System · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [V-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2019-25238.md)
  `CVE-2019-25238` · CVE record: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. SOL GPON/EPON OLT Platform · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS](https://agentprime.io/advisories/CVE-2019-25234.md)
  `CVE-2019-25234` · CVE record: Carlo Gavazzi AB SmartHouse Webapp · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF)
- [AVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS Vulnerabilities](https://agentprime.io/advisories/CVE-2019-25233.md)
  `CVE-2019-25233` · CVE record: AVE S.p.A. DOMINAplus · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF)
- [Teradek Cube 7.3.6 Cross-Site Request Forgery Password Change](https://agentprime.io/advisories/CVE-2018-25156.md)
  `CVE-2018-25156` · CVE record: Teradek, LLC Cube · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change](https://agentprime.io/advisories/CVE-2018-25155.md)
  `CVE-2018-25155` · CVE record: Teradek, LLC Slice · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Ecessa Edge EV150 10.7.4 Cross-Site Request Forgery via User Configuration](https://agentprime.io/advisories/CVE-2018-25152.md)
  `CVE-2018-25152` · CVE record: Ecessa Corporation Ecessa Edge EV150 · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Ecessa WANWorx WVR-30 < 10.7.4 Cross-Site Request Forgery via User Configuration](https://agentprime.io/advisories/CVE-2018-25151.md)
  `CVE-2018-25151` · CVE record: Ecessa Corporation WANWorx WVR-30 · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Ecessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request Forgery via User Configuration](https://agentprime.io/advisories/CVE-2018-25150.md)
  `CVE-2018-25150` · CVE record: Ecessa Corporation Ecessa ShieldLink SL175EHQ · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface](https://agentprime.io/advisories/CVE-2018-25149.md)
  `CVE-2018-25149` · CVE record: Microhard Systems Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway CSRF Vulnerabilities · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Synaccess netBooter NP-0801DU 7.4 Cross-Site Request Forgery via Admin Interface](https://agentprime.io/advisories/CVE-2018-25133.md)
  `CVE-2018-25133` · CVE record: Synaccess Networks Inc. netBooter NP-0801DU · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [SOCA Access Control System 180612 Cross-Site Request Forgery via Admin Interface](https://agentprime.io/advisories/CVE-2018-25127.md)
  `CVE-2018-25127` · CVE record: SOCA Technology Co., Ltd SOCA Access Control System · CVSS 5.1 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68601.md)
  `CVE-2025-68601` · CVE record: Rustaurius Five Star Restaurant Reservations · CVSS 5.4 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68584.md)
  `CVE-2025-68584` · CVE record: Constantin Boiangiu Vimeotheque · CVSS 4.3 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Fast User Switching plugin <= 1.4.10 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68583.md)
  `CVE-2025-68583` · CVE record: Tikweb Management Fast User Switching · CVSS 4.3 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68580.md)
  `CVE-2025-68580` · CVE record: pluginsware Advanced Classifieds & Directory Pro · CVSS 4.3 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68573.md)
  `CVE-2025-68573` · CVE record: Alessandro Piconi Simple Keyword to Link · CVSS 5.4 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68567.md)
  `CVE-2025-68567` · CVE record: wphocus My auctions allegro · CVSS 5.4 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Trade Runner plugin <= 3.14 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-67625.md)
  `CVE-2025-67625` · CVE record: tmtraderunner Trade Runner · CVSS 4.3 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Evergreen Post Tweeter plugin <= 1.8.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability](https://agentprime.io/advisories/CVE-2025-67622.md)
  `CVE-2025-67622` · CVE record: titopandub Evergreen Post Tweeter · CVSS 7.1 High · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Email Capture plugin <= 3.12.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68529.md)
  `CVE-2025-68529` · CVE record: Rhys Wynne WP Email Capture · CVSS 4.3 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Zucchetti Axess CLOKI Access Control 1.64 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2021-47722.md)
  `CVE-2021-47722` · CVE record: Axesstmc Zucchetti Axess CLOKI Access Control · CVSS 5.1 Medium · Not analysed yet · Published 23 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'](https://agentprime.io/advisories/CVE-2025-14163.md)
  `CVE-2025-14163` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.3 Medium · Not analysed yet · Published 23 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2023-53961.md)
  `CVE-2023-53961` · CVE record: SOUND4 Ltd. Impact/Pulse/First and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 22 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62107.md)
  `CVE-2025-62107` · CVE record: PluginOps Feather Login Page · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Custom 404 Pro plugin <= 3.12.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-62880.md)
  `CVE-2025-62880` · CVE record: Kunal Custom 404 Pro · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Web to SugarCRM Lead <= 1.0.0 - Cross-Site Request Forgery to Custom Field Deletion](https://agentprime.io/advisories/CVE-2025-13361.md)
  `CVE-2025-13361` · CVE record: dipesh_patel Web to SugarCRM Lead · CVSS 4.3 Medium · Not analysed yet · Published 21 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WP Hallo Welt <= 1.4. - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-13365.md)
  `CVE-2025-13365` · CVE record: tikolan WP Hallo Welt · CVSS 6.1 Medium · Not analysed yet · Published 20 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WP DB Booster <= 1.0.1 - Cross-Site Request Forgery to Database Cleanup](https://agentprime.io/advisories/CVE-2025-14168.md)
  `CVE-2025-14168` · CVE record: wpmaniax WP DB Booster · CVSS 4.3 Medium · Not analysed yet · Published 20 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Amazon affiliate lite Plugin <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-14734.md)
  `CVE-2025-14734` · CVE record: nestornoe Amazon affiliate lite Plugin · CVSS 5.4 Medium · Not analysed yet · Published 20 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-14164.md)
  `CVE-2025-14164` · CVE record: edckwt Quran Gateway · CVSS 4.3 Medium · Not analysed yet · Published 20 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO](https://agentprime.io/advisories/GHSA-5j53-63w8-8625.md)
  `GHSA-5j53-63w8-8625`, `CVE-2025-68481`, `PYSEC-2026-1363` · PyPI `fastapi-users`: affected `<15.0.2`, fixed in `15.0.2` · CVSS 5.9 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Broken access control, Cross-site request forgery (CSRF)
- [CSRF in Restajet's Online Food Delivery System](https://agentprime.io/advisories/CVE-2025-1927.md)
  `CVE-2025-1927` · CVE record: Restajet Information Technologies Inc. Online Food Delivery System · CVSS 7.1 High · Not analysed yet · Published 19 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.](https://agentprime.io/advisories/CVE-2025-66906.md)
  `CVE-2025-66906` · CVE record · CVSS 6.1 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [FreshRSS has Logout CSRF that Leads to DoS via \<track src>](https://agentprime.io/advisories/CVE-2025-59949.md)
  `CVE-2025-59949` · CVE record: FreshRSS FreshRSS · CVSS 5.3 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation](https://agentprime.io/advisories/CVE-2025-68434.md)
  `CVE-2025-68434` · CVE record: opensourcepos opensourcepos · CVSS 8.8 High · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [CSRF in Ercom Cryptobox administration console](https://agentprime.io/advisories/CVE-2025-14266.md)
  `CVE-2025-14266` · CVE record: Ercom Cryptobox · CVSS 0.6 Low · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival](https://agentprime.io/advisories/CVE-2025-14399.md)
  `CVE-2025-14399` · CVE record: wpcodefactory Download Plugins and Themes in ZIP from Dashboard · CVSS 4.3 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in GROWI](https://agentprime.io/advisories/CVE-2025-64700.md)
  `CVE-2025-64700` · CVE record: GROWI, Inc. GROWI · CVSS 5.1 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.](https://agentprime.io/advisories/CVE-2025-67173.md)
  `CVE-2025-67173` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.ht…](https://agentprime.io/advisories/CVE-2025-66953.md)
  `CVE-2025-66953` · CVE record · CVSS 8.8 High · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlle…](https://agentprime.io/advisories/CVE-2025-65203.md)
  `CVE-2025-65203` · CVE record · CVSS 7.1 High · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site request forgery (CSRF), CWE-353, CWE-640
- [WordPress Meks Quick Plugin Disabler plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68083.md)
  `CVE-2025-68083` · CVE record: Meks Meks Quick Plugin Disabler · CVSS 5.4 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Semrush Content Toolkit plugin <= 1.1.32 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68082.md)
  `CVE-2025-68082` · CVE record: SEMrush CY LTD Semrush Content Toolkit · CVSS 5.4 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Freshchat plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64240.md)
  `CVE-2025-64240` · CVE record: freshchat Freshchat · CVSS 4.3 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress RTL Tester plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64239.md)
  `CVE-2025-64239` · CVE record: Yoav Farhi RTL Tester · CVSS 4.3 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-64237.md)
  `CVE-2025-64237` · CVE record: Graham Quick Interest Slider · CVSS 4.3 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Listify theme <= 3.2.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-59009.md)
  `CVE-2025-59009` · CVE record: Astoundify Listify · CVSS 4.3 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI1LTEyLTE2VDA4OjEyOjQ2Ljk4MTAwMFoiLCJDVkUtMjAyNS01OTAwOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI1LTEyLTMwVDIyOjU1OjMyLjI0ODAwMFoiLCJDVkUtMjAyNS01OTEzMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI1LTEyLTMwVDIyOjU1OjMyLjI0ODAwMFoiLCJDVkUtMjAyNS01OTEzMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.