Lucene search
Morten NørtoftPATCHSTACK:B05B4CB7BA4354B63BE922A51CE24CC1HistoryFeb 20, 2015 - 12:00 a.m.
WordPress Acobot Live Chat & Contact Form Plugin <= 2.0 - Multiple CSRF
2015-02-2000:00:00
Morten Nørtoft
patchstack.com
11
0.001 Low
EPSS
Percentile
48.9%
Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting attacks.
Solution
Upgrade the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| acobot live chat & contact form | le | 2.0 |
Related
nvd
nvd
CVE-2015-2039
2015-02-20 16:59:08
wpvulndb
wpvulndb
Acobot Live Chat & Contact Form <= 2.0 - CSRF/XSS
2015-02-22 00:00:00
cve
cve
CVE-2015-2039
2015-02-20 16:59:08
prion
prion
Cross site request forgery (csrf)
2015-02-20 16:59:00
cvelist
cvelist
CVE-2015-2039
2015-02-20 16:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00