CSRF on connecting Paypal as Payment Provider Analysed #807924 Valid Cross-Site Request Forgery Medium 2020-04-10 – 304 authenticity token not verfied leads to change business name Analysed #994504 Valid Cross-Site Request Forgery Medium 2020-10-23 $1,900 54 apps.shopify.com - CSRF token leakage through Google Analytics Analysed #196458 Valid Cross-Site Request Forgery – 2017-02-07 – 48 (BYPASS) Open redirect and XSS in supporthiring.shopify.com #158434 Valid Cross-Site Request Forgery – 2016-11-21 – 37 [h1-2102] Wholesale - CSRF to Generate Invitation Token for a Customer and Move Customer to Invited Status #1091209 Valid Cross-Site Request Forgery Low 2021-12-06 – 34 CSRF in all API endpoints when authenticated using HTTP Authentication #195156 Valid Cross-Site Request Forgery – 2017-03-28 – 30 H1514 CSRF in Domain transfer allows adding your domain to other user's account #416978 Valid Cross-Site Request Forgery High 2020-03-30 – 23 Twitter Disconnect CSRF #111216 Valid Cross-Site Request Forgery – 2016-02-01 – 18 [https://shipit-sox-staging.shopifycloud.com] Presence of multiple vulnerabilities present in Ruby On Rails #1400309 Valid Cross-Site Request Forgery None 2022-04-16 – 17 SVG parser loads external resources on image upload #97501 Valid Cross-Site Request Forgery – 2016-06-02 – 15 [CSRF] Install premium themes #103351 Valid Cross-Site Request Forgery – 2016-07-27 – 11 Missing of csrf protection #96470 Valid Cross-Site Request Forgery – 2015-12-07 $500 9 Payment gateway status transferred to Shopify without authentication #56628 Valid Cross-Site Request Forgery – 2016-09-27 – 7 Attach Pinterest account - no State/CSRF parameter in Oauth Call back #111218 Valid Cross-Site Request Forgery – 2016-02-01 – 6 [CSRF] Activate PayPal Express Checkout #99321 Valid Cross-Site Request Forgery – 2015-12-03 – 4 CSRF in Connecting Pinterest Account #104931 Valid Cross-Site Request Forgery – 2016-02-02 – 2