CVE-2013-2108 WP Cleanfix <= 3.0.1 - Cross-Site Request Forgery

MediumCVSS 5.4 EPSS 2.2% Public exploit

Published: 2020-02-10 18:07
Updated: 2026-06-17 02:52
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

WordPress WP Cleanfix Plugin 2.4.4 has CSRF

Affected products

Product	Affected versions	Fixed in
wordpress wp-cleanfix(WordPress)	< 3.0.2	3.0.2
undolog cleanfix	= 2.4.4	No fix listed
WP Cleanfix Plugin authors WP Cleanfix Plugin	= 2.4.4	No fix listed

References

Wordfence Intelligence third-party-advisory
www.cve.org
www.openwall.com exploit mailing-list third-party-advisory
www.securityfocus.com third-party-advisory vdb-entry
exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
exchange.xforce.ibmcloud.com third-party-advisory vdb-entry

CVSS v3.1

5.4 Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: Required
Scope: Unchanged
Confidentiality: Low
Integrity: Low
Availability: None

All scores (3)

v3.1 5.4 · nvd@nist.gov
v3.1 6.1 · wordfence
v2.0 4.3 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.19% (percentile 82.7)
CWE: CWE-352 Cross-Site Request Forgery

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

WordPress Plugin WP Cleanfix - Cross-Site Request Forgery Exploit · Exploit Database (OffSec) · 2013-05-16