CVE-2013-3258 Digg Digg < 5.3.5 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bufferapp digg digg | <= 5.3.4 | No fix listed |
| bufferapp digg digg | = 5.0 | No fix listed |
| bufferapp digg digg | = 5.0.1 | No fix listed |
| bufferapp digg digg | = 5.0.2 | No fix listed |
| bufferapp digg digg | = 5.0.3 | No fix listed |
| bufferapp digg digg | = 5.0.4 | No fix listed |
| bufferapp digg digg | = 5.0.5 | No fix listed |
| bufferapp digg digg | = 5.1 | No fix listed |
| bufferapp digg digg | = 5.1.1 | No fix listed |
| bufferapp digg digg | = 5.1.2 | No fix listed |
| bufferapp digg digg | = 5.2 | No fix listed |
| bufferapp digg digg | = 5.2.1 | No fix listed |
| bufferapp digg digg | = 5.2.2 | No fix listed |
| bufferapp digg digg | = 5.2.3 | No fix listed |
| bufferapp digg digg | = 5.2.4 | No fix listed |
| bufferapp digg digg | = 5.2.5 | No fix listed |
| bufferapp digg digg | = 5.2.6 | No fix listed |
| bufferapp digg digg | = 5.2.7 | No fix listed |
| bufferapp digg digg | = 5.2.8 | No fix listed |
| bufferapp digg digg | = 5.2.9 | No fix listed |
| bufferapp digg digg | = 5.3.0 | No fix listed |
| bufferapp digg digg | = 5.3.1 | No fix listed |
| bufferapp digg digg | = 5.3.2 | No fix listed |
| bufferapp digg digg | = 5.3.3 | No fix listed |
| wordpress digg-digg(WordPress) | < 5.3.5 | 5.3.5 |
References
- 53120 third-party-advisory
- wordpress.org patch
- 60046 vdb-entry
- diggdigg-cve20133258-csrf(84418) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org