Lucene search
+L

48 matches found

exploitpack
exploitpack
•added 2013/11/23 12:00 a.m.•15 views

WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery

WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/63800/info The Blue Wrench Video Widget plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to...

0.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2013/11/23 12:00 a.m.•28 views

WordPress Blue Wrench Video Widget Plugin - Cross Site Request Forgery

WordPress Blue Wrench Video Widget plugin is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Upgrade the plugin...

6.8CVSS3.1AI score0.02884EPSS
SaveExploits2References1Affected Software1
Exploit DB
Exploit DB
•added 2013/11/23 12:00 a.m.•29 views

WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63800/info The Blue Wrench Video Widget plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the...

6.8CVSS5.2AI score0.02884EPSS
SaveExploits2
NVD
NVD
•added 2013/11/19 4:50 a.m.•34 views

CVE-2013-6797

Cross-site request forgery CSRF vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bwurl parameter in the bw-videos pag...

6.8CVSS7.2AI score0.02884EPSS
SaveExploits2References4
Prion
Prion
•added 2013/11/19 4:50 a.m.•21 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bwurl parameter in the bw-videos pag...

6.8CVSS7.7AI score0.02884EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2013/11/15 8:00 p.m.•49 views

CVE-2013-6797

Cross-site request forgery CSRF vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bwurl parameter in the bw-videos pag...

7.2AI score0.02884EPSS
SaveExploits2References4
CVE
CVE
•added 2013/11/15 8:00 p.m.•55 views

CVE-2013-6797

CVE-2013-6797 is a CSRF vulnerability in the WordPress plugin Blue Wrench Video Widget (bluewrench-video-widget.php) prior to version 2.0.0 . The issue allows remote attackers to hijack an administrator’s session by crafting requests that embed arbitrary URLs via the bw_url parameter on the bw-vi...

6.8CVSS7.4AI score0.02884EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/11/15 12:00 a.m.•6 views

CVE-2013-6797: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bwurl parameter in the bw-videos pag...

6.8CVSS6AI score0.02884EPSS
SaveExploits2References2
Rows per page
Query Builder