Cross-Site Request Forgery

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery BypassCVE-2020-36747brainstormforce · CVSS 4.3 · 0.5% likely

   CWE-352

2. Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery BypassCVE-2020-36737brainstormforce · CVSS 4.3 · 0.5% likely

   CWE-352

3. WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery BypassCVE-2020-36736brainstormforce · CVSS 4.3 · 0.5% likely

   CWE-352

4. WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-25058Brainstorm Force · CVSS 4.3 · 0.3% likely

   CWE-352

5. WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-46851Brainstorm Force · CVSS 4.3 · 0.3% likely

   CWE-352

6. WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-51402Brain Storm Force · CVSS 4.3 · 0.2% likely

   CWE-352

7. WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-24568Brainstorm Force · CVSS 4.3 · 0.2% likely

   CWE-352

8. SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce DistributionCVE-2025-12535brainstormforce · CVSS 5.3 · 0.2% likely

   CWE-352

9. WordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-24962Brainstorm Force · CVSS 4.3 · 0.1% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.