CVE-2013-2698

Cross-site request forgery CSRF vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry via unspecified vectors...

CVE-2013-2698

The CVE-2013-2698 issue affects the WordPress Calendar plugin, specifically versions before 1.3.3. It is a Cross‑Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack a user’s authentication to perform calendar-entry additions via unspecified vectors. Impact is user-aut...