Lucene search

[email protected]CVE-2013-3253

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3253

2022-10-0316:14:45

CWE-352

[email protected]

web.nvd.nist.gov

cve-2013-3253

cross-site request forgery

csrf

vulnerability

admin/setting.php

xhanch - my twitter plugin

wordpress

remote attackers

authentication

administrators

settings

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings.

Affected configurations

NVD

Node

xhanchmy_twitterRange≤2.7.6wordpress

xhanchmy_twitterMatch2.5.8wordpress

xhanchmy_twitterMatch2.5.9wordpress

xhanchmy_twitterMatch2.6.0wordpress

xhanchmy_twitterMatch2.6.1wordpress

xhanchmy_twitterMatch2.6.2wordpress

xhanchmy_twitterMatch2.6.3wordpress

xhanchmy_twitterMatch2.6.4wordpress

xhanchmy_twitterMatch2.6.5wordpress

xhanchmy_twitterMatch2.6.6wordpress

xhanchmy_twitterMatch2.6.7wordpress

xhanchmy_twitterMatch2.6.8wordpress

xhanchmy_twitterMatch2.6.9wordpress

xhanchmy_twitterMatch2.7.0wordpress

xhanchmy_twitterMatch2.7.1wordpress

xhanchmy_twitterMatch2.7.2wordpress

xhanchmy_twitterMatch2.7.3wordpress

xhanchmy_twitterMatch2.7.4wordpress

xhanchmy_twitterMatch2.7.5wordpress

AND

wordpresswordpressMatch-

CPENameOperatorVersion
xhanch:my_twitterxhanch my twitterle2.7.6
xhanch:my_twitterxhanch my twittereq2.5.8
xhanch:my_twitterxhanch my twittereq2.5.9
xhanch:my_twitterxhanch my twittereq2.6.0
xhanch:my_twitterxhanch my twittereq2.6.1
xhanch:my_twitterxhanch my twittereq2.6.2
xhanch:my_twitterxhanch my twittereq2.6.3
xhanch:my_twitterxhanch my twittereq2.6.4
xhanch:my_twitterxhanch my twittereq2.6.5
xhanch:my_twitterxhanch my twittereq2.6.6

CPE	Name	Operator	Version
xhanch:my_twitter	xhanch my twitter	le	2.7.6
xhanch:my_twitter	xhanch my twitter	eq	2.5.8
xhanch:my_twitter	xhanch my twitter	eq	2.5.9
xhanch:my_twitter	xhanch my twitter	eq	2.6.0
xhanch:my_twitter	xhanch my twitter	eq	2.6.1
xhanch:my_twitter	xhanch my twitter	eq	2.6.2
xhanch:my_twitter	xhanch my twitter	eq	2.6.3
xhanch:my_twitter	xhanch my twitter	eq	2.6.4
xhanch:my_twitter	xhanch my twitter	eq	2.6.5
xhanch:my_twitter	xhanch my twitter	eq	2.6.6