CVE-2013-3250

2022-10-0316:14:44

flexera

www.cve.org

cve-2013-3250

wordpress

csrf

remote attackers

authentication hijack

plugin settings

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.7%

JSON

Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin’s settings.

References

secunia.com/advisories/53125

wordpress.org/plugins/wp-maintenance-mode/changelog/