CVE-2013-3252

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-3252

CVE-2013-3252 affects the WP-PostViews WordPress plugin; the CSRF flaw is in the options admin page, allowing an attacker to hijack administrator authentication and change plugin settings. Affected versions are WP-PostViews before 1.63 (and related entries reference settings manipulation). The ro...