CVE-2013-2701

Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...

CVE-2013-2701

The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...