# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth](https://agentprime.io/advisories/CVE-2026-3903.md)
  `CVE-2026-3903` · CVE record: modulards Modular DS: Monitor, update, and backup multiple websites · CVSS 4.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection](https://agentprime.io/advisories/CVE-2026-2626.md)
  `CVE-2026-2626` · CVE record: Unknown divi-booster · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site request forgery (CSRF), Insecure deserialization
- [LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.7 - Cross-Site Request Forgery in Booking Form Settings Update to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-2324.md)
  `CVE-2026-2324` · CVE record: latepoint LatePoint – Calendar Booking Plugin for Appointments and Events · CVSS 6.1 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php](https://agentprime.io/advisories/CVE-2026-28495.md)
  `CVE-2026-28495` · CVE record: GetSimpleCMS-CE GetSimpleCMS-CE · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Craft CMS has a potential information disclosure vulnerability in preview tokens](https://agentprime.io/advisories/GHSA-vg3j-hpm9-8v5v.md)
  `GHSA-vg3j-hpm9-8v5v`, `CVE-2026-29113`, `PKSA-24yr-dkzm-n9v5` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.17.3 || >=5.0.0-RC1, <5.9.7`, fixed in `4.17.3`, `5.9.7` · CVSS 2.3 Low · Not analysed yet · Published 10 Mar 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF)
- [Court Reservation < 1.10.9 - Event Deletion via CSRF](https://agentprime.io/advisories/CVE-2026-1508.md)
  `CVE-2026-1508` · CVE record: Unknown Court Reservation · CVSS 4.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [InstantCMS has Multiple CSRF Vulnerabilities](https://agentprime.io/advisories/CVE-2026-28281.md)
  `CVE-2026-28281` · CVE record: instantsoft icms2 · CVSS 7.1 High · Not analysed yet · Published 9 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.](https://agentprime.io/advisories/CVE-2025-70031.md)
  `CVE-2025-70031` · CVE record · CVSS 8.8 High · Not analysed yet · Published 9 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [SourceCodester Computer Laboratory Management System cross-site request forgery](https://agentprime.io/advisories/CVE-2026-3770.md)
  `CVE-2026-3770` · CVE record: SourceCodester Computer Laboratory Management System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [The Guardian News Feed <= 1.2 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1087.md)
  `CVE-2026-1087` · CVE record: openplatform The Guardian News Feed · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Font Pairing Preview For Landing Pages <= 1.3 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1086.md)
  `CVE-2026-1086` · CVE record: wpsolutions Font Pairing Preview For Landing Pages · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [True Ranker <= 2.2.9 - Cross-Site Request Forgery to Unauthorized True Ranker Disconnection](https://agentprime.io/advisories/CVE-2026-1085.md)
  `CVE-2026-1085` · CVE record: optimizza True Ranker · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Purchase Button For Affiliate Link <= 1.0.2 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1073.md)
  `CVE-2026-1073` · CVE record: themepul Purchase Button For Affiliate Link · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial](https://agentprime.io/advisories/CVE-2026-2494.md)
  `CVE-2026-2494` · CVE record: metagauss ProfileGrid – User Profiles, Groups and Communities · CVSS 4.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection](https://agentprime.io/advisories/CVE-2026-1644.md)
  `CVE-2026-1644` · CVE record: glowlogix WP Frontend Profile · CVSS 4.3 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php](https://agentprime.io/advisories/CVE-2018-25200.md)
  `CVE-2018-25200` · CVE record: Zsoft OOP CMS BLOG · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Easyndexer 1.0 Cross-Site Request Forgery via createuser.php](https://agentprime.io/advisories/CVE-2018-25190.md)
  `CVE-2018-25190` · CVE record: Sourceforge Easyndexer · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile](https://agentprime.io/advisories/CVE-2018-25186.md)
  `CVE-2018-25186` · CVE record: Tina4 Tina4 Stack · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php](https://agentprime.io/advisories/CVE-2018-25177.md)
  `CVE-2018-25177` · CVE record: Sourceforge Data Center Audit · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Alive Parish 2.0.4 SQL Injection and Arbitrary File Upload](https://agentprime.io/advisories/CVE-2018-25176.md)
  `CVE-2018-25176` · CVE record: Demo Alive Parish · CVSS 8.8 High · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [ABC ERP 0.6.4 Cross-Site Request Forgery via \_configurar_perfil.php](https://agentprime.io/advisories/CVE-2018-25174.md)
  `CVE-2018-25174` · CVE record: Abc-Erp ABC ERP · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [DoceboLMS 1.2 SQL Injection via lesson.php](https://agentprime.io/advisories/CVE-2018-25170.md)
  `CVE-2018-25170` · CVE record: Spaghettilearning DoceboLMS · CVSS 8.8 High · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery in QuickCMS](https://agentprime.io/advisories/CVE-2026-1468.md)
  `CVE-2026-1468` · CVE record: OpenSolution QuickCMS · CVSS 5.1 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF](https://agentprime.io/advisories/CVE-2026-3589.md)
  `CVE-2026-3589` · CVE record: Automattic WooCommerce · CVSS 7.5 High · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF](https://agentprime.io/advisories/CVE-2026-1128.md)
  `CVE-2026-1128` · CVE record: Unknown WP eCommerce · CVSS 4.3 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Chamilo: CSRF Vulnerability in Project Deletion](https://agentprime.io/advisories/CVE-2025-59541.md)
  `CVE-2025-59541` · CVE record: chamilo chamilo-lms · CVSS 8.1 High · Not analysed yet · Published 6 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Gokapi has CSRF in Login Endpoint](https://agentprime.io/advisories/GHSA-hcff-qv74-7hr4.md)
  `GHSA-hcff-qv74-7hr4`, `CVE-2026-29084`, `GO-2026-4624` · Go `github.com/forceu/gokapi`: affected `<2.2.3`, fixed in `2.2.3` · CVSS 4.6 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Mercurius: Incorrect Content-Type parsing can lead to CSRF attack](https://agentprime.io/advisories/GHSA-v66j-6wwf-jc57.md)
  `GHSA-v66j-6wwf-jc57`, `CVE-2025-64166` · npm `mercurius`: affected `<16.4.0`, fixed in `16.4.0` · CVSS 5.4 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation](https://agentprime.io/advisories/CVE-2026-30793.md)
  `CVE-2026-30793` · CVE record: rustdesk-client RustDesk Client · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Broken access control, Cross-site request forgery (CSRF)
- [Ghost has incomplete CSRF protections around OTC use](https://agentprime.io/advisories/GHSA-9m84-wc28-w895.md)
  `GHSA-9m84-wc28-w895`, `BIT-ghost-2026-29784`, `CVE-2026-29784` · npm `ghost`: affected `>=5.101.6, <6.19.3`, fixed in `6.19.3` · CVSS 7.5 High · Not analysed yet · Published 5 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)](https://agentprime.io/advisories/GHSA-6mxw-2vhf-42g5.md)
  `GHSA-6mxw-2vhf-42g5`, `CVE-2026-2994`, `PKSA-46yc-bd63-xkv6` · Packagist `concrete5/concrete5`: affected `<9.4.8`, fixed in `9.4.8` · CVSS 2.3 Low · Not analysed yet · Published 4 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration.](https://agentprime.io/advisories/CVE-2021-35486.md)
  `CVE-2021-35486` · CVE record · CVSS 8.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections](https://agentprime.io/advisories/CVE-2026-27758.md)
  `CVE-2026-27758` · CVE record: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS · CVSS 5.1 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Parse Dashboard is Missing CSRF Protection for its Agent Endpoint](https://agentprime.io/advisories/GHSA-3534-xp88-25rc.md)
  `GHSA-3534-xp88-25rc`, `CVE-2026-27609` · npm `parse-dashboard`: affected `>=7.3.0-alpha.42, <9.0.0-alpha.8`, fixed in `9.0.0-alpha.8` · CVSS 8.3 High · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Chia Blockchain send_transaction cross-site request forgery](https://agentprime.io/advisories/CVE-2026-3193.md)
  `CVE-2026-3193` · CVE record: Chia Blockchain · CVSS 2.3 Low · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2026-2410.md)
  `CVE-2026-2410` · CVE record: themeisle Disable Admin Notices – Hide Dashboard Notifications · CVSS 4.3 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Talishar Vulnerable to Cross-Site Request Forgery (CSRF)](https://agentprime.io/advisories/CVE-2026-27632.md)
  `CVE-2026-27632` · CVE record: Talishar Talishar · CVSS 2.6 Low · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Caddy is vulnerable to cross-origin config application via local admin API /load](https://agentprime.io/advisories/GHSA-879p-475x-rqh2.md)
  `GHSA-879p-475x-rqh2`, `CVE-2026-27589`, `GO-2026-4537` · Go `github.com/caddyserver/caddy/v2`: affected `<2.11.1`, fixed in `2.11.1` · CVSS 6.9 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Binardat 10G08-0800GSM Network Switch CSRF](https://agentprime.io/advisories/CVE-2026-27518.md)
  `CVE-2026-27518` · CVE record: Binardat Ltd. 10G08-0800GSM Network Switch · CVSS 5.1 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Bludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints](https://agentprime.io/advisories/CVE-2026-27741.md)
  `CVE-2026-27741` · CVE record: Bludit Bludit · CVSS 5.1 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Traccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpoints](https://agentprime.io/advisories/CVE-2026-25649.md)
  `CVE-2026-25649` · CVE record: traccar traccar · CVSS 7.3 High · Not analysed yet · Published 23 Feb 2026 · Tags: Cross-site request forgery (CSRF), Open redirect
- [Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions](https://agentprime.io/advisories/CVE-2026-23694.md)
  `CVE-2026-23694` · CVE record: Aruba.it Aruba HiSpeed Cache · CVSS 5.1 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Tenda F3 CSRF in Web Management Interface](https://agentprime.io/advisories/CVE-2026-27513.md)
  `CVE-2026-27513` · CVE record: Shenzhen Tenda Technology Co., Ltd. Tenda F3 · CVSS 5.1 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads](https://agentprime.io/advisories/CVE-2026-27146.md)
  `CVE-2026-27146` · CVE record: GetSimpleCMS-CE GetSimpleCMS-CE · CVSS 7.1 High · Not analysed yet · Published 20 Feb 2026 · Tags: Cross-site request forgery (CSRF), Unrestricted file upload
- [OrientDB 3.0.17 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2019-25447.md)
  `CVE-2019-25447` · CVE record: Orientdb OrientDB · CVSS 5.3 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.](https://agentprime.io/advisories/CVE-2025-13671.md)
  `CVE-2025-13671` · CVE record: OpenText™ Web Site Management Server · CVSS 5.9 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Kenta Companion plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-27090.md)
  `CVE-2026-27090` · CVE record: WP Moose Kenta Companion · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-27050.md)
  `CVE-2026-27050` · CVE record: ThimPress RealPress · CVSS 5.4 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25422.md)
  `CVE-2026-25422` · CVE record: Themes4WP Popularis Extra · CVSS 5.4 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25411.md)
  `CVE-2026-25411` · CVE record: themastercut Revision Manager TMC · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25337.md)
  `CVE-2026-25337` · CVE record: wpcoachify Coachify · CVSS 5.4 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress PublishPress Revisions plugin <= 3.7.22 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25322.md)
  `CVE-2026-25322` · CVE record: PublishPress PublishPress Revisions · CVSS 5.4 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25319.md)
  `CVE-2026-25319` · CVE record: wpzita Zita Elementor Site Library · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Whatsiplus Scheduled Notification for Woocommerce <= 1.0.1 - Cross-Site Request Forgery to 'wsnfw_save_users_settings' AJAX Action](https://agentprime.io/advisories/CVE-2026-1455.md)
  `CVE-2026-1455` · CVE record: whatsiplus Whatsiplus Scheduled Notification for Woocommerce · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Remove Post Type Slug <= 1.0.2 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-14167.md)
  `CVE-2025-14167` · CVE record: akshayshah5189 Remove Post Type Slug · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Page Title, Description & Open Graph Updater <= 1.02 - Cross-Site Request Forgery to Arbitrary Page Title Modification](https://agentprime.io/advisories/CVE-2025-13438.md)
  `CVE-2025-13438` · CVE record: dienodigital Page Title, Description & Open Graph Updater · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Country Blocker for AdSense <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2025-13413.md)
  `CVE-2025-13413` · CVE record: soyrodriguez Country Blocker for AdSense · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [NewsBlogger <= 0.2.5.6 - 0.2.5.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation](https://agentprime.io/advisories/CVE-2025-12821.md)
  `CVE-2025-12821` · CVE record: spicethemes NewsBlogger · CVSS 8.8 High · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change](https://agentprime.io/advisories/CVE-2025-12172.md)
  `CVE-2025-12172` · CVE record: mailchimp Mailchimp List Subscribe Form · CVSS 4.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [SD.NET RIM 4.7.3c - 'idtyp' SQL Injection](https://agentprime.io/advisories/CVE-2019-25359.md)
  `CVE-2019-25359` · CVE record: Sitzungsdienst SD.NET RIM · CVSS 8.8 High · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI2LTAyLTE4VDIxOjU1OjA1Ljg1OTAwMFoiLCJDVkUtMjAxOS0yNTM1OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI2LTAzLTExVDE2OjM4OjEyLjg4MzAwMFoiLCJDVkUtMjAyNi0zMDg2OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI2LTAzLTExVDE2OjM4OjEyLjg4MzAwMFoiLCJDVkUtMjAyNi0zMDg2OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.