Vulnerability CVE-2013-2710


Published: 2014-06-02

Description:
Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

Vendor: Ajaydsouza
Product: Contextual related posts 
Version:
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8
1.7.3
1.7.2
1.7.1
1.7
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6
1.5.2
1.5.1
1.5
1.4.2
1.4.1
1.4
1.3.1
1.3
1.2.2
1.2.1
1.2
1.1.1
1.1
1.0

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
http://wordpress.org/plugins/contextual-related-posts/changelog/
http://xforce.iss.net/xforce/xfdb/84100
http://www.securityfocus.com/bid/59733
http://secunia.com/advisories/52960

Copyright 2019, cxsecurity.com

 

Back to Top