Cross site request forgery (csrf)

2014-08-1220:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.3%

JSON

Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
wordpress_file_uploadle2.4.1

CPE	Name	Operator	Version
	wordpress_file_upload	le	2.4.1

References

secunia.com/advisories/60520

wordpress.org/plugins/wp-file-upload/changelog