Cross-Site Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.CVE-2018-20968Smackcoders · 0.6% likely

   CWE-352

2. The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.CVE-2018-20967Smackcoders · 0.6% likely

   CWE-352

3. WP Ultimate CSV Importer Plugin cross-site request forgeryCVE-2015-10125Smackcoders · CVSS 4.3 · 0.4% likely

   CWE-352

4. WordPress Google SEO Pressor for Rich snippets Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-31775Smackcoders Inc., · CVSS 4.3 · 0.2% likely

   CWE-352

5. Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information ExposureCVE-2025-13606smackcoders · CVSS 6.5 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.