CVE-2008-0205 Math Comment Spam Protection <= 2.1 - Cross-Site Request Forgery
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress math comment spam protection plugin | <= 2.1 | No fix listed |
| wordpress math-comment-spam-protection(WordPress) | < 2.2 | 2.2 |
References
- 20080103 securityvulns.com russian vulnerabilities digest exploit mailing-list
- 3539 third-party-advisory
- websecurity.com.ua
- 20080103 securityvulns.com russian vulnerabilities digest mailing-list
- Wordfence Intelligence third-party-advisory
- www.cve.org