Cross site request forgery (csrf)

2014-04-1020:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.6%

JSON

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

CPENameOperatorVersion
wp-postviewseq1.10
wp-postviewseq1.01
wp-postviewseq1.50
wp-postviewseq1.61
wp-postviewseq1.31
wp-postviewseq1.11
wp-postviewseq1.40
wp-postviewseq1.00
wp-postviewseq1.30
wp-postviewseq1.60

Name	Operator	Version
wp-postviews	eq	1.10
wp-postviews	eq	1.01
wp-postviews	eq	1.50
wp-postviews	eq	1.61
wp-postviews	eq	1.31
wp-postviews	eq	1.11
wp-postviews	eq	1.40
wp-postviews	eq	1.00
wp-postviews	eq	1.30
wp-postviews	eq	1.60