EUVD-2013-3195

Malware in sbrugna...

CVE-2013-3258

The CVE concerns the Digg Digg WordPress plugin (versions before 5.3.5). A Cross‑Site Request Forgery (CSRF) vulnerability could allow an attacker to hijack a user’s authenticated session and cause authenticated requests that modify plugin settings via unspecified vectors. The root cause details ...

CVE-2013-3258

Cross-site request forgery CSRF vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors...

PT-2014-2667

Name of the Vulnerable Software and Affected Versions Digg Digg plugin versions prior to 5.3.5 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that modify settings. Recommendations For versions prior to 5.3.5, update to version 5.3...

CVE-2013-3258: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors...

WordPress Digg Digg Plugin <= 5.3.4 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of users for requests that modify settings via unspecified vectors. Solution Update the plugin...