Cross-Site Request Forgery

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRFCVE-2021-24725Quantumcloud · 0.5% likely

   CWE-352

2. Slider Hero <= 8.2.0 - Cross-Site Request Forgery BypassCVE-2021-4424quantumcloud · CVSS 4.3 · 0.4% likely

   CWE-352

3. WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-24415QuantumCloud · CVSS 5.4 · 0.3% likely

   CWE-352

4. WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-44993QuantumCloud · CVSS 4.3 · 0.3% likely

   CWE-352

5. ChatBot < 4.4.5 - Stored XSS via CSRFCVE-2023-1011Quantumcloud · CVSS 6.1 · 0.2% likely

   CWE-352

6. AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actionsCVE-2023-5534quantumcloud · CVSS 4.3 · 0.2% likely

   CWE-352

7. WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-67465QuantumCloud · CVSS 4.3 · 0.1% likely

   CWE-352

8. WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-61981QuantumCloud · CVSS 5.4 · 0.1% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.