Lucene search
Tom AdamsPATCHSTACK:70BEED8779AF344096E0498C941CBB05HistoryMay 23, 2014 - 12:00 a.m.
WordPress Member Approval Plugin <= 131109 - CSRF
2014-05-2300:00:00
Tom Adams
patchstack.com
4
0.002 Low
EPSS
Percentile
52.2%
Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to wp-admin/options-general.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| member approval | le | 131109 |
Related
cve
cve
CVE-2014-3850
2014-06-11 14:55:08
wpvulndb
wpvulndb
prion
prion
Cross site request forgery (csrf)
2014-06-11 14:55:00
cvelist
cvelist
CVE-2014-3850
2014-06-11 14:00:00
packetstorm
packetstorm
WordPress Member Approval Cross Site Request Forgery
2014-06-10 00:00:00
nvd
nvd
CVE-2014-3850
2014-06-11 14:55:08