Lucene search
HistoryApr 11, 2014 - 2:55 p.m.
CVE-2013-2706
cve-2013-2706
csrf
vulnerability
wordpress
stream video player
1.4.0
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
40.6%
Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.
Affected configurations
Node
rodrigo_polostream_video_playerMatch1.4.0
wordpresswordpressMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| rodrigo_polo:stream_video_player | rodrigo polo stream video player | eq | 1.4.0 |
Related
cvelist
cvelist
CVE-2013-2706
2014-04-11 14:00:00
patchstack
patchstack
WordPress Stream Video Player Plugin <= 1.4.0 - CSRF
2013-03-26 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-04-11 14:55:00
nvd
nvd
CVE-2013-2706
2014-04-11 14:55:05
wpvulndb
wpvulndb
Stream Video Player <= 1.4.0 - Setting Manipulation CSRF
2014-08-01 10:59:01
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
40.6%
Related for CVE-2013-2706