CVE-2013-2107

Cross-site request forgery CSRF vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdatemailto parameter in the mail-on-update pag...

CVE-2013-2107

The CVE-2013-2107 entry concerns the WordPress Mail On Update plugin, affected in versions before 5.2.0. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets an attacker exploit an authenticated admin session to change the "List of alternative recipients" via the mailonupdate_mailto...

CVE-2013-2107

creationtimestamp| type| source ---|---|--- 2013-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38517...