Lucene search
HistoryJun 25, 2014 - 8:55 p.m.
CVE-2014-4030
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.5%
Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.
Affected configurations
Node
longtailvideojw_player_for_flash_\&_html5_video_pluginRange≤2.1.3wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.0wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.1wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.2wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.3wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.4wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.0.5wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.1.0wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.1.1wordpress
ORlongtailvideojw_player_for_flash_\&_html5_video_pluginMatch2.1.2wordpress
Related
cve
cve
CVE-2014-4030
2014-06-25 20:55:07
wpvulndb
wpvulndb
JW Player 2.1.2 - wp-admin/admin.php Player Deletion CSRF
2014-08-01 10:59:15
patchstack
patchstack
WordPress Flash & HTML5 Video Plugin - Cross Site Request Forgery
2014-06-10 00:00:00
WordPress Flash & HTML5 Video Plugin - Cross Site Request Forgery
2014-06-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-06-25 20:55:00
cvelist
cvelist
CVE-2014-4030
2014-06-25 20:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.5%
Related for NVD:CVE-2014-4030