Cross site request forgery (csrf)

2014-06-2520:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.

CPENameOperatorVersion
jw_player_for_flash_\\&_html5_video_plugineq2.0.1
jw_player_for_flash_\\&_html5_video_plugineq2.1.2
jw_player_for_flash_\\&_html5_video_plugineq2.0.2
jw_player_for_flash_\\&_html5_video_plugineq2.1.0
jw_player_for_flash_\\&_html5_video_plugineq2.0.5
jw_player_for_flash_\\&_html5_video_plugineq2.1.1
jw_player_for_flash_\\&_html5_video_pluginle2.1.3
jw_player_for_flash_\\&_html5_video_plugineq2.0.0
jw_player_for_flash_\\&_html5_video_plugineq2.0.3
jw_player_for_flash_\\&_html5_video_plugineq2.0.4

Name	Operator	Version
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.1
jw_player_for_flash_\\&_html5_video_plugin	eq	2.1.2
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.2
jw_player_for_flash_\\&_html5_video_plugin	eq	2.1.0
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.5
jw_player_for_flash_\\&_html5_video_plugin	eq	2.1.1
jw_player_for_flash_\\&_html5_video_plugin	le	2.1.3
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.0
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.3
jw_player_for_flash_\\&_html5_video_plugin	eq	2.0.4