CVE-2013-3252

Опубликовано: 10 апр. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:lesterchan:wp-postviews:*:*:*:*:*:wordpress:*:*

Версия до 1.62 (включая)

cpe:2.3:a:lesterchan:wp-postviews:1.00:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.01:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.02:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.10:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.11:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.20:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.30:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.31:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.40:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.50:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.60:*:*:*:*:wordpress:*:*

cpe:2.3:a:lesterchan:wp-postviews:1.61:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 46%

0.00236

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-fw94-5mx7-v5hw

github

больше 3 лет назад