Cross-Site Request Forgery

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivationCVE-2023-4247stellarwp · CVSS 5.4 · 0.3% likely

   CWE-352

2. GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration DeletionCVE-2023-4248stellarwp · CVSS 5.4 · 0.3% likely

   CWE-352

3. GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installationCVE-2023-4246stellarwp · CVSS 4.3 · 0.3% likely

   CWE-352

4. GiveWP <= 4.15.3 - Cross-Site Request ForgeryCVE-2026-11981stellarwp · CVSS 4.3 · 0.2% likely

   CWE-352

5. WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-47315StellarWP · CVSS 5.4 · 0.2% likely

   CWE-352

6. WordPress The Events Calendar plugin <= 6.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-31433StellarWP · CVSS 4.3 · 0.2% likely

   CWE-352

7. WordPress Event Tickets and Registration plugin <= 5.11.0.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-38762StellarWP · CVSS 4.3 · 0.2% likely

   CWE-352

8. WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-37518StellarWP · CVSS 4.3 · 0.2% likely

   CWE-352

9. WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-24537StellarWP · CVSS 5.4 · 0.2% likely

   CWE-352

10. WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-67467StellarWP · CVSS 5.4 · 0.1% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.