EUVD-2013-2635

Malware in sbrugna...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2696

CVE-2013-2696 affects the All in One Webmaster WordPress plugin prior to 8.2.4. A CSRF flaw lets remote attackers hijack authentication for requests that insert XSS sequences, potentially abusing an authenticated session. CVSS v2 base score 6.8 (Medium). Remediation: update the plugin to 8.2.4 or...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

WordPress One Webmaster Plugin <= 8.2.3 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that insert cross site scripting sequences. Solution Update the plugin...