CVE-2013-3476 Related Posts < 2.7.2 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zemanta related posts | <= 2.6 | No fix listed |
| zemanta related posts | = 1.0 | No fix listed |
| zemanta related posts | = 1.1 | No fix listed |
| zemanta related posts | = 1.2 | No fix listed |
| zemanta related posts | = 1.3 | No fix listed |
| zemanta related posts | = 1.3.1 | No fix listed |
| zemanta related posts | = 1.3.2 | No fix listed |
| zemanta related posts | = 1.3.3 | No fix listed |
| zemanta related posts | = 1.4 | No fix listed |
| zemanta related posts | = 1.5 | No fix listed |
| zemanta related posts | = 1.6 | No fix listed |
| zemanta related posts | = 1.7 | No fix listed |
| zemanta related posts | = 1.8 | No fix listed |
| zemanta related posts | = 1.8.1 | No fix listed |
| zemanta related posts | = 2.3 | No fix listed |
| zemanta related posts | = 2.4.1 | No fix listed |
| zemanta related posts | = 2.5.1 | No fix listed |
| wordpress-23-related-posts-plugin(WordPress) | < 2.7.2 | 2.7.2 |
References
- 53279 third-party-advisory
- wordpress.org patch
- 59839 vdb-entry
- wp-relatedposts-cve20133476-unspecified-csrf(84247) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org