crunchify vulnerabilities

Products

• all-in-on-webmaster 1
• facebook members 1
• foursquare-checkins 1

Latest crunchify CVEs

Newest publication first

1. CVE-2013-2703 Facebook Members < 5.0.5 - Cross-Site Request Forgery

   Published 2013-05-05

   Medium·CVSS 6.8 EPSS 0.97%

   Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.

2. CVE-2013-2709 FourSquare Checkins < 1.3 - Cross-Site Request Forgery to Cross-Site Scripting

   Published 2013-04-26

   Medium·CVSS 6.8 EPSS 0.95%

   Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

3. CVE-2013-2696 WP Webmaster < 8.2.4 - Cross-Site Request Forgery

   Published 2013-04-25

   Medium·CVSS 6.8 EPSS 0.95%

   Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.