CVE-2013-3479 ShareThis <= 7.0.5 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sharethis | <= 7.0.5 | No fix listed |
| sharethis | = 5.2.1 | No fix listed |
| sharethis | = 5.3 | No fix listed |
| sharethis | = 5.4.1 | No fix listed |
| sharethis | = 6.0 | No fix listed |
| sharethis | = 7.0 | No fix listed |
| sharethis | = 7.0.1 | No fix listed |
| sharethis | = 7.0.2 | No fix listed |
| sharethis | = 7.0.3 | No fix listed |
| sharethis | = 7.0.4 | No fix listed |
| wordpress share-this(WordPress) | < 7.0.6 | 7.0.6 |
References
- 53135 third-party-advisory vendor-advisory
- wordpress.org
- Wordfence Intelligence third-party-advisory
- www.cve.org