CVE-2013-3477 Related Posts by Zemanta <= 1.3.1 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zemanta related posts | <= 1.3.1 | No fix listed |
| zemanta related posts | = 1.0 | No fix listed |
| zemanta related posts | = 1.1 | No fix listed |
| zemanta related posts | = 1.2 | No fix listed |
| zemanta related posts | = 1.3 | No fix listed |
| wordpress related-posts-by-zemanta(WordPress) | < 1.3.2 | 1.3.2 |
References
- 53321 third-party-advisory
- wordpress.org
- 59840 vdb-entry
- relatedposts-cve20133477-unspecified-csrf(84246) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org