Cross-Site Request Forgery

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders UpdateCVE-2024-0624strangerstudios · CVSS 5.3 · 1.0% likely

   CWE-352

2. Paid Memberships Pro <= 2.12.10 - Cross-Site Request ForgeryCVE-2024-0588strangerstudios · CVSS 4.3 · 0.9% likely

   CWE-352

3. Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery BypassCVE-2020-36754strangerstudios · CVSS 4.3 · 0.5% likely

   CWE-352

4. WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-28419Stranger Studios · CVSS 5.4 · 0.4% likely

   CWE-352

5. Paid Memberships Pro <= 3.0.1 - Cross-Site Request ForgeryCVE-2024-3215strangerstudios · CVSS 5.3 · 0.3% likely

   CWE-352

6. Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership ModificationCVE-2024-1407strangerstudios · CVSS 5.4 · 0.2% likely

   CWE-352

7. WordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-57659Stranger Studios · CVSS 8.8 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.