CVE-2013-2708 Content Slide <= 1.4.2 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snilesh content slide | = 1.4.2 | No fix listed |
| wordpress content-slide(WordPress) | <= 1.4.2 | No fix listed |
References
- 93871 vdb-entry
- 52949 third-party-advisory vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org