CVE-2013-2693

Опубликовано: 10 апр. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unspecified vectors.

Ссылки

http://osvdb.org/92053
http://secunia.com/advisories/52878
Vendor Advisory
http://wordpress.org/plugins/wp-print/changelog
http://osvdb.org/92053
http://secunia.com/advisories/52878
Vendor Advisory
http://wordpress.org/plugins/wp-print/changelog

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wp-plugins:wp-print:*:*:*:*:*:wordpress:*:*

Версия до 2.51 (включая)

cpe:2.3:a:wp-plugins:wp-print:2.00:-:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.00:a:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.01:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.02:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.03:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.04:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.05:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.06:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.10:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.11:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.20:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.30:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.31:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.40:*:*:*:*:wordpress:*:*

cpe:2.3:a:wp-plugins:wp-print:2.50:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 40%

0.00179

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-q39q-h3pm-87mq

github

больше 3 лет назад