Lucene search
HistoryMay 14, 2014 - 7:55 p.m.
CVE-2013-2700
cve-2013-2700
cross-site request forgery
csrf vulnerability
wp125 plugin
adminmenus.php
wordpress
remote attackers
authentication hijacking
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.6%
Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors.
Affected configurations
Node
webmaster-sourcewp125Range≤1.4.9wordpress
ORwebmaster-sourcewp125Match1.0.0wordpress
ORwebmaster-sourcewp125Match1.1.0wordpress
ORwebmaster-sourcewp125Match1.2.0wordpress
ORwebmaster-sourcewp125Match1.3.0wordpress
ORwebmaster-sourcewp125Match1.3.7wordpress
ORwebmaster-sourcewp125Match1.3.8wordpress
ORwebmaster-sourcewp125Match1.3.9wordpress
ORwebmaster-sourcewp125Match1.4.0wordpress
ORwebmaster-sourcewp125Match1.4.1wordpress
ORwebmaster-sourcewp125Match1.4.2wordpress
ORwebmaster-sourcewp125Match1.4.3wordpress
ORwebmaster-sourcewp125Match1.4.4wordpress
ORwebmaster-sourcewp125Match1.4.5wordpress
ORwebmaster-sourcewp125Match1.4.6wordpress
ORwebmaster-sourcewp125Match1.4.7wordpress
ORwebmaster-sourcewp125Match1.4.8wordpress
Related
nvd
nvd
CVE-2013-2700
2014-05-14 19:55:08
prion
prion
Cross site request forgery (csrf)
2014-05-14 19:55:00
cvelist
cvelist
CVE-2013-2700
2014-05-14 19:00:00
patchstack
patchstack
WordPress WP125 Plugin <= 1.4.9 - CSRF
2013-03-26 00:00:00
wpvulndb
wpvulndb
WP125 <= 1.4.9 - CSRF
2014-08-01 10:58:35
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.6%
Related for CVE-2013-2700